CyberSecBulletin

Berabuddies vulnerabilities

We track 1 vulnerability in Berabuddies products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Berabuddies vulnerabilities

  • 8.8 High severity

    AgentFlow: Improper Control of Generation of Code

    CVE-2026-7466Berabuddies

    AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce r