Wave of CVEs Hits Open-Source Agent and RAG Platforms
New vulnerabilities published in NVD on October 30 affect RAGFlow, n8n, Flowise and the TAKO agent for Okta, underlining how quickly flaws are accumulating in agentic AI infrastructure.
Four high-impact security flaws in popular open-source agent and RAG tooling were published in the US National Vulnerability Database on October 30. CVE-2026-119337 in RAGFlow lets the chat completions API bypass access checks on private agents, while CVE-2026-119408 in n8n enables remote code execution through deprecated Function and LangChain Code nodes. Flowise carries CVE-2026-119978, a sandbox escape that leads to operating-system command execution.
The most severe case involves the TAKO AI Agent for Okta: CVE-2026-63377, rated critical at CVSS 9.8, exposes an unauthenticated first-run setup endpoint, and a companion flaw allows Python execution as root through a validator that fails to block getattr chains. Weekly aggregation data show 87 agent-related CVEs in week 44 alone, and roughly 616 over the past twelve months, up from 92 the year before. Around a third of those flaws open paths to data access. The recurring pattern, analysts note, is missing tenant-ownership checks and homemade code validators treated as sandboxes.