Berabuddies Agentflow vulnerabilities

• berabuddies agentflow AgentFlow Arbitrary Python Pipeline Execution via pipeline_path CVE-2026-7466 7.7 HighApril 29, 2026
• berabuddies agentflow AgentFlow Local Web API Content-Type Validation Bypass CVE-2026-7439 4.8 MediumApril 29, 2026
• berabuddies agentflow Flowring｜AgentFlow - Stored Cross-Site Scripting CVE-2026-2099 5.1 MediumFebruary 10, 2026
• berabuddies agentflow Flowring｜AgentFlow - Reflected Cross-site Scripting CVE-2026-2098 5.1 MediumFebruary 10, 2026
• berabuddies agentflow Flowring｜Agentflow - Arbitrary File Upload CVE-2026-2097 8.7 HighFebruary 10, 2026
• berabuddies agentflow Flowring｜Agentflow - Missing Authenticaton CVE-2026-2096 9.3 CriticalFebruary 10, 2026
• berabuddies agentflow Flowring｜Agentflow - Authentication Bypass CVE-2026-2095 9.3 CriticalFebruary 10, 2026
• berabuddies agentflow Flowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key CVE-2025-11899 9.2 CriticalOctober 17, 2025
• berabuddies agentflow Flowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal CVE-2025-11898 8.7 HighOctober 17, 2025
• berabuddies agentflow Flowring Technology Agentflow - Account Lockout Bypass CVE-2025-3709 9.8 CriticalMay 2, 2025