A vulnerability classified as critical was found in infiniflow RAGFlow up to 0.24.0. This issue affects some unknown processing of the file rag/prompts/generator.py. The manipulation results in improper neutralization of special elements used in a template engine.

This vulnerability is identified as CVE-2026-45312. The attack can be executed remotely. There is not any exploit available.