■ Executive Risk Command Center
CISA KEV
Not Listed
Not present in the verified catalog snapshot; this does not prove absence of exploitation
⚡ CYBERDUDEBIVASH® SENTINEL APEX
Source-linked automated security intelligence with explicit evidence status and provenance.
🔍 VULNERABILITY EXPOSURE ASSESSMENT
Are your systems exposed to this vulnerability? CYBERDUDEBIVASH® provides rapid vulnerability assessments covering API attack surfaces, cloud infrastructure, web applications, and network perimeter — with remediation-ready reports.
🔍 CVE-2026-75898 | ⚠ CVSS 8.5 | 📅 August 18, 2026 | 📂 Vulnerabilities | 🛡 CYBERDUDEBIVASH®
CVE VULNERABILITY ADVISORY · HIGH
CDB-CTI-2026-4A712A0E0B9B · Generated 2026-08-18T16:35:46.961770Z
Executive Summary
RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component (agent/component/invoke.py). The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or requests.put without calling the shared assert_url_is_safe validator or pinning the resolved address, unlike the crawler, SearXNG, file-upload, and RSS fetch paths. A user who can create or trigger an agent can direct the server to fetch loopback, link-local, and RFC 1918 destinations, including cloud instance metadata endpoints and services co-located on the deployment network, and the response body is returned as the component output. Where an agent is configured to interpolate the chat query into the Invoke URL, the destination is chosen by whoever can send that query. CVSS Score: 8.5 CWE: CWE-918
Decision: Validate relevance and exposure using the cited source and internal evidence before treating this record as an incident, confirmed compromise, or customer-specific finding.
Threat Classification and Evidence Status
Intelligence family
CVE Vulnerability Advisory
Exploitation
Not confirmed by available evidence; not in verified KEV snapshot
Patch/remediation
Availability not established in the source record — verify vendor guidance
Verified Facts
Source type: CVE Vulnerability Advisory
Source publication time: 2026-08-18T15:17:15.367000
CVE: CVE-2026-75898
CVSS base score: 8.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
CWE: CWE-918
KEV catalog check: Not present in the successfully retrieved catalog snapshot; this does not prove absence of exploitation.
Technical Analysis
Vulnerability class: Server Side Request Forgery. Assessment: Active exploitation is not confirmed by the available evidence. Prioritization must combine technical severity, exposure, asset criticality, and compensating controls.
Exposure and Remediation Decisions
P0 — Inventory: Confirm the affected product and version against authoritative vendor/NVD data; prioritize internet-facing and business-critical assets.
P0 — Remediation: Availability not established in the source record — verify vendor guidance
P1 — Compensating controls: Restrict exposure, enforce least privilege, and apply vendor-supported mitigations when immediate remediation is not possible.
P1 — Retrospective review: Search only the telemetry relevant to the affected component and validated vulnerability class; absence of alerts does not prove absence of exploitation.
Source Evidence Extract
CVE ID: CVE-2026-75898
Description: RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component (agent/component/invoke.py). The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or requests.put without calling the shared assert_url_is_safe validator or pinning the resolved address, unlike the crawler, SearXNG, file-upload, and RSS fetch paths. A user who can create or trigger an agent can direct the server to fetch loopback, link-local, and RFC 1918 destinations, including cloud instance metadata endpoints and services co-located on the deployment network, and the response body is returned as the component output. Where an agent is configured to interpolate the chat query into the Invoke URL, the destination is chosen by whoever can send that query.
CVSS Score: 8.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
CWEs: CWE-918
This extract is escaped and rendered from the ingested source record; generated analysis is not presented as a source fact.
MITRE ATT&CK Mapping
Initial Access → Exploit Public-Facing Application (T1190), conditional on an exposed web application.
Mappings are conditional analytical aids, not claims that the technique occurred. Promote a mapping to observed only after telemetry confirms the behavior.
Detection Engineering
DETECTION STATUS: SYNTAX_VALIDATED_EXPERIMENTAL
The source identifies a request-oriented vulnerability class with testable class-level request indicators.
Collect decoded request target, destination/upstream address, response status, and application error telemetry.
Treat matches as investigation leads; confirm product route and affected version before escalation.
SIGMA YAML — SYNTAX VALIDATED · EXPERIMENTAL · ENVIRONMENT TUNING REQUIRED
title: Potential Server Side Request Forgery Probing Related to CVE-2026-75898
id: 90349ae5-9f4f-5b11-8264-b1b46b580886
status: experimental
description: Detects class-level request indicators. It does not establish successful exploitation.
references:
- https://nvd.nist.gov/vuln/detail/CVE-2026-75898
author: CYBERDUDEBIVASH Sentinel APEX Detection Engineering
date: '2026-08-18'
logsource:
category: webserver
detection:
selection:
cs-uri-query|contains:
- 169.254.169.254
- 127.0.0.1
- localhost
condition: selection
falsepositives:
- Security testing
- Legitimate encoded application parameters
level: medium
tags:
- attack.initial-access
- attack.t1190
SENTINEL KQL — SYNTAX VALIDATED · EXPERIMENTAL · ENVIRONMENT TUNING REQUIRED
// Potential Server Side Request Forgery Probing Related to CVE-2026-75898
// report: CDB-CTI-2026-4A712A0E0B9B
// Placeholder table name -- bind to your ingested web/WAF request-log table (e.g. AzureDiagnostics with Category == 'ApplicationGatewayAccessLog', W3CIISLog, or a custom table) and confirm the request-URI column name before deployment.
WebRequestLogs
| where RequestUri has_any ("169.254.169.254", "127.0.0.1", "localhost")
| project TimeGenerated, RequestUri, ClientIP
Automated intelligence synthesis — not human reviewed. Public reference draft — not a certified customer deliverable. Customer-specific action requires exposure validation and accountable human approval.
Role-Based Decisions
Vulnerability Manager: Track against cve vulnerability advisory intake. Exploitation status: Not confirmed by available evidence; not in verified KEV snapshot. Patch status: Availability not established in the source record — verify vendor guidance. — Prioritization reflects this record's own exploitation/patch evidence, not a fixed severity template.
SOC Manager: Review the detection guidance below before enabling any blocking action on it. — Detection maturity for this record is stated explicitly, not assumed production-ready.
Source Reliability & Corroboration
nvd
Source Reliability: B
Information Credibility: 3 (Possibly True)
Overall Analytical Confidence: MEDIUM
Reported by a single identified source; an independent second source has not been found (see the evidence ledger).
🎯 Recommended For This Threat
Vulnerability AssessmentAPI · SaaS · Cloud · Web Security
DevSecOps OptimizationCI/CD Security · Pipeline Hardening
🔗 Related Intelligence Reports
#CyberSecurity #ThreatIntelligence #CyberDudeBivash #SentinelAPEX #CloudSecurity #ZeroTrust
Provenance and Review Status
Report IDCDB-CTI-2026-4A712A0E0B9B
Source systemnvd
Source published2026-08-18T15:17:15.367000
Source-record SHA-2564a712a0e0b9bd6e15ec4b97c44336b0f88040a6818aa13695aba7c706421d63c
Generated UTC2026-08-18T16:35:46.972525Z
Review statusAutomated intelligence synthesis — not human reviewed
CertificationPublic Intelligence Certification: TACTICAL_READY (automated evidence-graph certification — see Provenance for the source basis)