What happened
NVD published CVE-2026-61808 (CVSS 9.8, Critical) on August 7, 2026, describing that LightRAG — a popular retrieval-augmented-generation framework — ships with its API server bound to all interfaces and authentication disabled out of the box through version 1.5.4.
Why it matters
RAG pipelines are the backbone of enterprise knowledge-grounded LLM deployments; an unauthenticated attacker able to read, poison, or delete a RAG knowledge base can both exfiltrate sensitive indexed corpora and corrupt retrieval results fed into downstream LLM responses (indirect prompt injection via knowledge-base poisoning), with no authentication barrier by default.
Attack vector
The LightRAG API server binds to 0.0.0.0 (all network interfaces) with authentication disabled by default. Any unauthenticated network attacker who can reach the port can read all indexed document content, upload or delete documents, and modify the RAG knowledge base without credentials.
Affected systems
HKUDS LightRAG ≤ 1.5.4
Mitigation
Upgrade past the fixed commit (https://github.com/HKUDS/LightRAG/commit/0bd102401b4b28a02664e5b6af476bf7a4470292); explicitly enable authentication and bind to localhost/internal interfaces only in production deployments.