All 5 CVE vulnerabilities found in Agentflow 4.0, with AI-generated Chinese analysis, references, and POCs.
Vendor: Flowring Technology Corp
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-96440 | Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） CWE-22 | 7.1 | High | 2026-09-29 |
| CVE-2026-96431 | Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type CWE-434 | 9.3 | Critical | 2026-09-29 |
| CVE-2026-96430 | Flowring Agentflow 4.0 - Exposed Dangerous Method or Function CWE-749 | 8.7 | High | 2026-09-29 |
| CVE-2026-96429 | Flowring Agentflow 4.0 - SQL Injection CWE-89 | 9.3 | Critical | 2026-09-29 |
| CVE-2026-96428 | Flowring Agentflow 4.0 - SQL Injection CWE-89 | 9.3 | Critical | 2026-09-29 |
All 5 known CVE vulnerabilities affecting Agentflow 4.0 with full Chinese analysis, references, and POCs where available.