RAGFlow

RAGFlow is a mature open-source RAG engine with agent capabilities and strong docs, but recent security vuln and limited interop/privacy docs warrant caution.

67
Trust score
Visit RAGFlowStale · Not verified
✓ Our Verdict

data_incident_12mo: CVE-2026-24770 RCE vuln in Jan 2026 (patched)

Trust Breakdown

67
Trust scoreCaution
AGENT
68
Autonomous workflow delegation
TRUST
65
Transparency & verification
INTEROP
55
Protocol compatibility breadth
SECURE
65
Security controls & audit trail
DOCS
80
Documentation completeness
How these scores are calculated →

What It Actually Does

RAGFlow is a mature open-source RAG engine with agent capabilities and strong docs, but recent security vuln and limited interop/privacy docs warrant caution.

Fit Assessment

Best for

Data / API
67
RAGFlow
Caution · 67/100
Visit RAGFlow

Score Breakdown

AGENT
68
Autonomous workflow delegation
TRUST
65
Transparency & verification
INTEROP
55
Protocol compatibility breadth
SECURE
65
Security controls & audit trail
DOCS
80
Documentation completeness

Protocol Support

MCP—
A2A—
A2H—
REST API—
Agent-callable—

Capabilities

Transaction capable—
ACP support—
Audit trace—

Pricing

Free

Workflow Fit

Data / API

Related Categories

Ready to evaluate RAGFlow in your stack?
Composite score: 67
Visit RAGFlow