AgiFlow vulnerabilities
We track 1 vulnerability in AgiFlow products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest AgiFlow vulnerabilities
- 7.3 High severity
scaffold-mcp: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some unknown functionality of the file packages/scaffold-mcp/src/server/index.ts of the component write-to-file Tool. The manipulation of the argument file_path result