This paper studies six open-source Retrieval-Augmented Generation (RAG) systems for software vulnerability detection, proposing a unified benchmark and component-level analysis to improve reproducibility and comparability.