EUVD-2026-88655
GHSA-m6wc-2jg2-2vh5
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network-reachable SQL injection with no user interaction; full read/write of database yields C:H/I:H and destructive DB operations justify A:H.
Primary rating from Vendor (ZUSO ART).
CVSS VectorVendor: ZUSO ART
Lifecycle Timeline
3DescriptionCVE.org
SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter.
AnalysisAI
Unauthenticated SQL injection in Flowring Agentflow 4.0 allows any remote attacker who can reach the web interface to execute arbitrary SQL statements through the 'words' parameter of the /WebAgenda/SMBAjaxAutoComplete.do endpoint. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, 9.3) and our independent CVSS 3.1 assessment (9.8-equivalent high confidentiality, integrity and availability impact) agree that exploitation requires no credentials, privileges, or user interaction - only network reachability and an instance built before the 2025/08/08 fixed release. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation against default configurations of Flowring Agentflow 4.0 (builds before 2025/08/08). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely high-priority issue by its intrinsic characteristics: the vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, score 9.3) describes an unauthenticated, network-reachable, low-complexity SQL injection with high confidentiality, integrity, and availability impact - the classic profile of a directly exploitable pre-auth database compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor's fixed build dated 2025/08/08 or later for Flowring Agentflow 4.0; this is the primary and only fully reliable fix, and administrators should confirm with the vendor that the patch specifically covers WebAgenda's autocomplete handler rather than assuming the date cutoff covers it. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all instances of Flowring Agentflow 4.0, especially those accessible from the internet, and restrict network access to the /WebAgenda/SMBAjaxAutoComplete.do endpoint using firewall rules or by disabling the endpoint if not essential. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Agentflow 4 0
View allUnauthenticated SQL injection in Flowring Agentflow 4.0 lets remote attackers run arbitrary SQL commands against the app
Remote code execution in Flowring Agentflow 4.0 is possible through the /WebAgenda/download/uploadFile.jsp endpoint, whe
Authenticated remote attackers can execute arbitrary SQL commands against Flowring Agentflow 4.0 through the /WebAgenda/
Remote authenticated attackers can write files to arbitrary locations in Flowring Agentflow 4.0 via a path traversal fla
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today