3 people 706e87af9f fix(admin): stop silent superuser creation on auth probe and harden bootstrap (#18702) ...

Fix CWE-798/306 admin security: check_admin() silently created default admin accounts on any anonymous request. Now no longer creates accounts. Bootstrap uses env/random password. Login throttling added. Admin port bound to localhost. 

---------

Co-authored-by: jindou <jindou@local>
Co-authored-by: maoyifeng <myfbee5@163.com>

2026-08-28 17:44:52 +08:00

..

client

Docs: Update version references to v0.27.1 in READMEs and docs (#18849)

2026-08-28 12:04:37 +08:00

server

fix(admin): stop silent superuser creation on auth probe and harden bootstrap (#18702)

2026-08-28 17:44:52 +08:00

build_cli_release.sh

Use RAGFlow CLI to replace RAGFlow Admin CLI (#12653)

2026-01-17 17:52:38 +08:00