Flowintel vulnerabilities

Products

• Flowintel 13

Newest

• flowintel Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input CVE-2026-81827 6.9 MediumAugust 27, 2026
• flowintel Flowintel Fails to Invalidate Active Sessions After Password Change CVE-2026-81826 9.1 CriticalAugust 27, 2026
• flowintel Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes CVE-2026-81820 5.1 MediumAugust 27, 2026
• flowintel Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments CVE-2026-81819 5.3 MediumAugust 27, 2026
• flowintel Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges CVE-2026-81818 8.6 HighAugust 27, 2026
• flowintel Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification CVE-2026-81817 7.2 HighAugust 27, 2026
• flowintel Flowintel Stored XSS in Calendar via Malicious Case Title CVE-2026-81814 5.1 MediumAugust 27, 2026
• flowintel Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content CVE-2026-81753 5.1 MediumAugust 27, 2026
• flowintel Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection CVE-2026-81743 7.5 HighAugust 27, 2026
• flowintel Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys CVE-2026-81662 8.6 HighAugust 27, 2026
• flowintel Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing CVE-2026-81659 7.1 HighAugust 27, 2026
• flowintel Stored Cross-Site Scripting via Vue Template Injection in FlowIntel CVE-2026-69075 6.9 MediumAugust 3, 2026
• flowintel FlowIntel external reference URL probe allows server-side request forgery CVE-2026-9813 6.2 MediumMay 28, 2026