Piflow
Monthly
Unauthenticated remote code execution in PiFlow 2.0.0-2.0.1 allows network attackers to drive the DeepAgents chat agent through POST /chat or POST /chat/stream and invoke the exec_shell tool, which runs arbitrary commands via subprocess.run without human approval or an allow-list. Publicly available exploit code exists, and successful exploitation can expose LLM API keys and database credentials present in the process environment. This is a genuine high-priority risk for exposed deployments where the chat agent feature is enabled and reachable, with no CISA KEV entry indicated in the supplied data.
Unauthenticated remote code execution in PiFlow 2.0.0-2.0.1 allows network attackers to drive the DeepAgents chat agent through POST /chat or POST /chat/stream and invoke the exec_shell tool, which runs arbitrary commands via subprocess.run without human approval or an allow-list. Publicly available exploit code exists, and successful exploitation can expose LLM API keys and database credentials present in the process environment. This is a genuine high-priority risk for exposed deployments where the chat agent feature is enabled and reachable, with no CISA KEV entry indicated in the supplied data.