Infiniflow ragflow version 0.24.0 contains an incorrect access control flaw in the API endpoint /v1/document/get/<doc_id>. An attacker who can reach this endpoint can retrieve the contents of any document by specifying its identifier, even without proper authentication or authorization. This enables disclosure of potentially sensitive information and can compromise confidentiality.

Any installation of infiniflow ragflow 0.24.0 exposed to a network path that includes the /v1/document/get endpoint. The vendor product name is infiniflow ragflow, and the vulnerable version is 0.24.0. No other versions or vendors are currently listed as affected by this CVE.

The flaw can be exploited by sending an unauthenticated HTTP GET request to the vulnerable endpoint. The CVSS score is 6.5 and the EPSS score is < 1%, indicating a modest severity but very low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, so it has not been reported as a widely exploited flaw. Nevertheless, because the endpoint allows data disclosure without authentication, an attacker who can reach the service may gain unauthorized access to arbitrary documents.