piflow vulnerabilities

1 known vulnerability in piflow from Cas-bigdatalab. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  piflow: Missing Authentication for Critical Functionality

  CVE-2026-109442Oct 20, 2026Cas-bigdatalab

  piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary com