← Database

CVE-2025-11898

HIGH CVSS: 7.5 Published: 2025-10-17 Modified: 2026-06-17

Description

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

Affected Platforms

Unknown

Weakness Type

CWE-23

References