AgentFlow vulnerabilities

1 known vulnerability in AgentFlow from Berabuddies. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  AgentFlow: Improper Control of Generation of Code

  CVE-2026-7466Apr 29, 2026Berabuddies

  AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce r