EUVD-2026-88659
GHSA-9cc7-6f9h-3f3m
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network endpoint reachable with low complexity by any authenticated user (PR:L), no interaction; arbitrary SQL yields full C/I/A within the database, scope unchanged.
Primary rating from Vendor (ZUSO ART).
CVSS VectorVendor: ZUSO ART
Lifecycle Timeline
3DescriptionCVE.org
Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter.
AnalysisAI
Authenticated remote attackers can execute arbitrary SQL commands against Flowring Agentflow 4.0 through the /WebAgenda/SQLWin.do endpoint, because the 'sql' request parameter is handed to the database tier without adequate validation or authorization checks (CWE-749, Exposed Dangerous Method or Function). Exploitation requires only a valid low-privileged session (CVSS vector PR:L) plus network reachability to the endpoint, and needs no user interaction; success yields high confidentiality, integrity, and availability impact limited to the Agentflow system itself (VC:H/VI:H/VA:H, SC:N/SI:N/SA:N, score 8.7), meaning database contents can be read, altered, or destroyed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid authenticated session on Flowring Agentflow 4.0 (PR:L) and network reachability to the /WebAgenda/SQLWin.do endpoint; exploitation then needs only an HTTP request supplying the 'sql' parameter with no user interaction. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-priority issue for organizations running the affected product. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is to upgrade Agentflow 4.0 to a build released on or after the vendor's 2026/08/28 remediation date, as indicated by the ZUSO ART advisory at https://zuso.ai/cve-advisory/advisory; because the advisory specifies a fix date rather than a discrete version number, confirm the exact patched build string with Flowring Technology Corp or your reseller before closing the ticket, and verify afterwards that /WebAgenda/SQLWin.do no longer accepts caller-supplied SQL. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, restrict network access to the /WebAgenda/SQLWin.do endpoint to trusted sources, deploy WAF rules to block SQL injection attempts targeting the 'sql' parameter, and review Agentflow logs for suspicious database queries. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Agentflow 4 0
View allUnauthenticated SQL injection in Flowring Agentflow 4.0 allows any remote attacker who can reach the web interface to ex
Unauthenticated SQL injection in Flowring Agentflow 4.0 lets remote attackers run arbitrary SQL commands against the app
Remote code execution in Flowring Agentflow 4.0 is possible through the /WebAgenda/download/uploadFile.jsp endpoint, whe
Remote authenticated attackers can write files to arbitrary locations in Flowring Agentflow 4.0 via a path traversal fla
Same weakness CWE-749 – Exposed Dangerous Method or Function
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today