Login Request a demo
AG
Product
Agentflow
by Flowring · last CVE Feb 10, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 4High 3Medium 2Low 0
Severity
All severities9Critical4High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Agentflow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2096
9.8
1%
Feb 10
Flowring｜Agentflow - Missing Authenticaton
Affected: 0
CVE-2026-2095
9.8
1%
Feb 10
Flowring｜Agentflow - Authentication Bypass
Affected: 0
CVE-2025-3709
9.8
1%
May 2
Flowring Technology Agentflow - Account Lockout Bypass
Affected: 4.0
CVE-2022-39036
9.8
1%
Nov 10
The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs
Affected: 4.0.0.1183.552
CVE-2026-2097
8.8
1%
Feb 10
Flowring｜Agentflow - Arbitrary File Upload
Affected: 0
CVE-2022-39038
8.8
1%
Nov 10
Agentflow BPM enterprise management system has improper authentication
Affected: 4.0.0.1183.552
CVE-2022-39037
7.5
1%
Nov 10
Agentflow BPM file download function has a path traversal vulnerability
Affected: 4.0.0.1183.552
CVE-2026-2098
6.1
0%
Feb 10
Flowring｜AgentFlow - Reflected Cross-site Scripting
Affected: 4.0.* before 4.0.0.1878.877
CVE-2026-2099
5.4
0%
Feb 10
Flowring｜AgentFlow - Stored Cross-Site Scripting
Affected: 4.0.* before 4.0.0.1878.877
Showing 9