Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Agentflow — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Agentflow, with AI-generated Chinese analysis, references, and POCs.

Vendor: Flowring Technology

CVE ID Title CVSS Severity Published
CVE-2026-7466 AgentFlow Arbitrary Python Pipeline Execution via pipeline_path CWE-94 8.8 High 2026-04-29
CVE-2026-7439 AgentFlow Local Web API Content-Type Validation Bypass CWE-346 4.4 Medium 2026-04-29
CVE-2026-2099 Flowring｜AgentFlow - Stored Cross-Site Scripting CWE-79 5.4 Medium 2026-02-10
CVE-2026-2098 Flowring｜AgentFlow - Reflected Cross-site Scripting CWE-79 6.1 Medium 2026-02-10
CVE-2026-2097 Flowring｜Agentflow - Arbitrary File Upload CWE-434 8.8 High 2026-02-10
CVE-2026-2096 Flowring｜Agentflow - Missing Authenticaton CWE-288 9.8 Critical 2026-02-10
CVE-2026-2095 Flowring｜Agentflow - Authentication Bypass CWE-288 9.8 Critical 2026-02-10
CVE-2025-11899 Flowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key CWE-321 8.1 High 2025-10-17
CVE-2025-11898 Flowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal CWE-23 7.5 High 2025-10-17
CVE-2025-3709 Flowring Technology Agentflow - Account Lockout Bypass CWE-307 9.8 Critical 2025-05-02

All 10 known CVE vulnerabilities affecting Agentflow with full Chinese analysis, references, and POCs where available.