Ragflow versions 0.24.0 and earlier contain an improper access control flaw in the update_metadata_setting API endpoint (api/apps/kb_app.py). The flaw allows an attacker to invoke the operation without proper authorization, enabling unauthorized changes to metadata and potentially causing cross‑session or privilege‑crossing actions. This direct manipulation undermines data integrity and the isolation expected between user sessions.

The affected product is Ragflow, specifically versions 0.24.0 and all earlier releases. No vendor name is listed in the CNA data, so administrators should verify the exact release they are running and assess whether it matches the impacted range.

The vulnerability has a CVSS score of 6.5, an EPSS score of under 1%, and it is not listed in the CISA KEV catalog. The flaw resides in a REST API endpoint that can be reached over HTTP/HTTPS, so the likely attack vector is remote. An adversary with network access to a Ragflow instance could send crafted requests to update_metadata_setting, leading to unauthorized metadata changes or privilege escalation.