Skip to content

ragflow

RAG & Retrieval

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

Go Latest v0.26.4 · 19d ago Security brief →

Features

  • Open‑source Retrieval‑Augmented Generation (RAG) engine with Agent capabilities
  • Unified context layer that integrates multiple LLM backends (e.g., GPT‑5, Gemini 3 Pro)
  • Built‑in agentic workflow and orchestration pipeline for production AI systems

Security Response History

2 CVEs
CVE Severity Disclosed Patched (this tool) vs Ecosystem Median
CVE-2026-42271 KEV high
CVSS 8.8
2026-06-08 2026-06-11 3d
CVE-2026-42208 KEV critical
CVSS 9.8
2026-05-08 2026-05-09 35h

Recent releases

View all 13 releases →
No immediate action
v0.26.4 Breaking risk

Stemmer + bugfixes

Review required
v0.26.3 Breaking risk
Auth

BigQuery, SoMark, MCP tools, batch uploads, UI header

No immediate action
v0.26.2 Breaking risk

Chat integrations + bugfixes

No immediate action
v0.26.1 New feature

Model edit, Chat channels, Observability, i18n, Legacy API

Review required
v0.25.6 Mixed
Auth

Browser component, AHC RAPTOR, tool decorator, metadata

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
85,361
Forks
9,971
Languages
Go Python TypeScript

Install & Platforms

Install via
docker

Community & Support

Beta — feedback welcome: [email protected]