Known Vulnerabilities for Agentflow 4.0 by Flowring Technology Corp
Listed below are 7 of the newest known vulnerabilities associated with "Agentflow 4.0" by "Flowring Technology Corp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-96440 json | Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-96431 json | Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow ... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-96430 json | Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/0... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-96429 json | SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allo... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-96428 json | SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allow... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-69262 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, `DELETE /api/v1/chat... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-61437 json | PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._r... | Not Provided | 2026-07-10 | 2026-07-14 |