RAGFlow version 0.24.0 contains an improper access control flaw in its get_dataset function of the evaluation API. The defect allows an unauthenticated user who can reach the /api/apps/evaluation_app endpoint to trigger attacker‑controlled code or command execution. This results in full code execution on the host running the service, compromising confidentiality, integrity, and availability. The flaw is described by CWE‑284 (Improper Access Control).

The vulnerable component is the RAGFlow 0.24.0 evaluation API. No vendor or product name is specified beyond the generic RAGFlow identifier, and the only version provided is the 0.24.0 release. The weakness exists in the get_dataset endpoint of the evaluation app, meaning systems that expose this service are affected.

The CVSS score of 9.8 indicates a critical vulnerability, while the EPSS score of less than 1% suggests limited current exploitation activity. The flaw is not listed in the CISA KEV catalog. The likely attack vector is an unauthenticated HTTP request to the get_dataset endpoint, provided the attacker has network access to the RAGFlow instance. Exploitation would allow execution of arbitrary code on the host running the service, compromising all security properties.