HKUDS LightRAG

5 known vulnerabilities in HKUDS LightRAG, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-86062 CVSS 6.1 medium LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx…
  • CVE-2026-85740 CVSS 7.1 high LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, _validated_addresses in…
  • CVE-2026-85734 CVSS 9.1 critical LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in…
  • CVE-2026-85725 CVSS 5.9 medium LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verify_password in lightrag/api/passwords.py compares…
  • CVE-2026-85709 CVSS 5.3 medium LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception…