Agentflow 4 0
Monthly
Remote authenticated attackers can write files to arbitrary locations in Flowring Agentflow 4.0 via a path traversal flaw in the /WebAgenda/download/uploadFile.jsp endpoint, affecting versions released before March 24, 2023. The vulnerability requires a low-privilege authenticated session and no user interaction, with a CVSS 4.0 base score of 7.1. No public exploit code or active exploitation has been identified at the time of analysis.
Remote code execution in Flowring Agentflow 4.0 is possible through the /WebAgenda/download/uploadFile.jsp endpoint, where authenticated low-privilege users can upload a file of dangerous type that the server then executes. Affected deployments are builds prior to 2023/03/24, and exploitation requires a valid application session but no victim interaction; no public exploit has been identified at time of analysis, though the technical impact is severe and warrants urgent patching.
Authenticated remote attackers can execute arbitrary SQL commands against Flowring Agentflow 4.0 through the /WebAgenda/SQLWin.do endpoint, because the 'sql' request parameter is handed to the database tier without adequate validation or authorization checks (CWE-749, Exposed Dangerous Method or Function). Exploitation requires only a valid low-privileged session (CVSS vector PR:L) plus network reachability to the endpoint, and needs no user interaction; success yields high confidentiality, integrity, and availability impact limited to the Agentflow system itself (VC:H/VI:H/VA:H, SC:N/SI:N/SA:N, score 8.7), meaning database contents can be read, altered, or destroyed. There is no confirmed active exploitation (CISA KEV does not list this CVE) and no public exploit code identified at time of analysis, but the low complexity, low privilege requirement, and network-reachable attack surface make this a high-priority fix for organizations running Agentflow 4.0 builds that predate the 2026/08/28 remediation.
Unauthenticated SQL injection in Flowring Agentflow 4.0 lets remote attackers run arbitrary SQL commands against the application database through the id parameter of the /WebAgenda/SMBAjaxConfigProcess.do endpoint, giving full read/write access to back-end data as returned by the vulnerable query. Only deployments running a build older than the 2025/08/08 fixed release and exposing the WebAgenda API to the network are affected; the CVSS 4.0 base score of 9.3 and the parallel CVSS 3.1 assessment (AV:N/AC:L/PR:N/UI:N, C/I/A:H) both reflect that no authentication, user interaction, or non-default configuration is required. No public exploit code has been identified at time of analysis, but the report originates from ZUSO ART and the endpoint is trivially reachable wherever WebAgenda is internet-exposed, so the practical risk for unsegmented deployments is high.
Unauthenticated SQL injection in Flowring Agentflow 4.0 allows any remote attacker who can reach the web interface to execute arbitrary SQL statements through the 'words' parameter of the /WebAgenda/SMBAjaxAutoComplete.do endpoint. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, 9.3) and our independent CVSS 3.1 assessment (9.8-equivalent high confidentiality, integrity and availability impact) agree that exploitation requires no credentials, privileges, or user interaction - only network reachability and an instance built before the 2025/08/08 fixed release. No public exploit code or confirmed active exploitation was identified at time of analysis; the issue was reported by ZUSO ART and remains a high-priority target for rapid patching given its trivial, pre-auth exploitation profile.
Remote authenticated attackers can write files to arbitrary locations in Flowring Agentflow 4.0 via a path traversal flaw in the /WebAgenda/download/uploadFile.jsp endpoint, affecting versions released before March 24, 2023. The vulnerability requires a low-privilege authenticated session and no user interaction, with a CVSS 4.0 base score of 7.1. No public exploit code or active exploitation has been identified at the time of analysis.
Remote code execution in Flowring Agentflow 4.0 is possible through the /WebAgenda/download/uploadFile.jsp endpoint, where authenticated low-privilege users can upload a file of dangerous type that the server then executes. Affected deployments are builds prior to 2023/03/24, and exploitation requires a valid application session but no victim interaction; no public exploit has been identified at time of analysis, though the technical impact is severe and warrants urgent patching.
Authenticated remote attackers can execute arbitrary SQL commands against Flowring Agentflow 4.0 through the /WebAgenda/SQLWin.do endpoint, because the 'sql' request parameter is handed to the database tier without adequate validation or authorization checks (CWE-749, Exposed Dangerous Method or Function). Exploitation requires only a valid low-privileged session (CVSS vector PR:L) plus network reachability to the endpoint, and needs no user interaction; success yields high confidentiality, integrity, and availability impact limited to the Agentflow system itself (VC:H/VI:H/VA:H, SC:N/SI:N/SA:N, score 8.7), meaning database contents can be read, altered, or destroyed. There is no confirmed active exploitation (CISA KEV does not list this CVE) and no public exploit code identified at time of analysis, but the low complexity, low privilege requirement, and network-reachable attack surface make this a high-priority fix for organizations running Agentflow 4.0 builds that predate the 2026/08/28 remediation.
Unauthenticated SQL injection in Flowring Agentflow 4.0 lets remote attackers run arbitrary SQL commands against the application database through the id parameter of the /WebAgenda/SMBAjaxConfigProcess.do endpoint, giving full read/write access to back-end data as returned by the vulnerable query. Only deployments running a build older than the 2025/08/08 fixed release and exposing the WebAgenda API to the network are affected; the CVSS 4.0 base score of 9.3 and the parallel CVSS 3.1 assessment (AV:N/AC:L/PR:N/UI:N, C/I/A:H) both reflect that no authentication, user interaction, or non-default configuration is required. No public exploit code has been identified at time of analysis, but the report originates from ZUSO ART and the endpoint is trivially reachable wherever WebAgenda is internet-exposed, so the practical risk for unsegmented deployments is high.
Unauthenticated SQL injection in Flowring Agentflow 4.0 allows any remote attacker who can reach the web interface to execute arbitrary SQL statements through the 'words' parameter of the /WebAgenda/SMBAjaxAutoComplete.do endpoint. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, 9.3) and our independent CVSS 3.1 assessment (9.8-equivalent high confidentiality, integrity and availability impact) agree that exploitation requires no credentials, privileges, or user interaction - only network reachability and an instance built before the 2025/08/08 fixed release. No public exploit code or confirmed active exploitation was identified at time of analysis; the issue was reported by ZUSO ART and remains a high-priority target for rapid patching given its trivial, pre-auth exploitation profile.