CVE-2026-24770 | infiniflow ragflow up to 0.23.1 MinerU Parser MinerUParser path traversal (GHSA-v7cf-w7gj-pgf4)

A vulnerability labeled as critical has been found in infiniflow ragflow up to 0.23.1. This affects the function MinerUParser of the component MinerU Parser. Such manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-24770. The attack can be executed remotely. There is not any exploit available.

Applying a patch is advised to resolve this issue.