flowintel — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in flowintel, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-81827	Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input CWE-20	6.9	Medium	2026-08-27
CVE-2026-81826	Flowintel Fails to Invalidate Active Sessions After Password Change CWE-613	9.1	Critical	2026-08-27
CVE-2026-81820	Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes CWE-79	5.1	Medium	2026-08-27
CVE-2026-81819	Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments CWE-862	5.3	Medium	2026-08-27
CVE-2026-81818	Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges CWE-269	8.6	High	2026-08-27
CVE-2026-81817	Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification CWE-639	7.2	High	2026-08-27
CVE-2026-81814	Flowintel Stored XSS in Calendar via Malicious Case Title CWE-79	5.1	Medium	2026-08-27
CVE-2026-81753	Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content CWE-79	5.1	Medium	2026-08-27
CVE-2026-81743	Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection CWE-22	7.5	High	2026-08-27
CVE-2026-81662	Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys CWE-94	8.6	High	2026-08-27
CVE-2026-81659	Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing CWE-22	7.1	High	2026-08-27
CVE-2026-69075	Stored Cross-Site Scripting via Vue Template Injection in FlowIntel CWE-79	6.9	Medium	2026-08-03
CVE-2026-9813	FlowIntel external reference URL probe allows server-side request forgery CWE-918	-	-	2026-05-28

All 13 known CVE vulnerabilities affecting flowintel with full Chinese analysis, references, and POCs where available.