Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-129158

ragent 1.1.0 Stored XSS via SVG Knowledge-Base Document Upload

ragent 1.1.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading SVG knowledge-base documents served inline as image/svg+xml. Attackers can upload a script-bearing SVG via /knowledge-base/{kb-id}/docs/upload so that victims opening /knowledge-base/docs/{docId}/file execute it in the application origin, enabling account takeover.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Nageoffer
Products
Ragent
CVE-2026-129157

ragent 1.0.0 through 1.1.0 Missing Authorization via /rag/traces/runs

ragent 1.0.0 through 1.1.0 contains a missing authorization vulnerability in RagTraceController that allows any logged-in user to view all users' RAG traces. Attackers can page through /rag/traces/runs and related node endpoints to read other users' usernames, user ids, conversation ids, questions, and per-node execution details.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Nageoffer
Products
Ragent