Flowintel vulnerabilities
We track 8 vulnerabilities in Flowintel products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest Flowintel vulnerabilities
- 7.3 High severity
flowintel: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in a database migration script in flowintel. The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has
- 9.1 Critical severity
flowintel: Session Fixation
Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their
- 8.6 High severity
flowintel: Improper Privilege Management
Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from ed
- 7.2 High severity
flowintel: Authorization Bypass Through User-Controlled Key
Affected versions of Flowintel contain an insecure direct object reference / broken object-level authorization issue across numerous task endpoints. The routes generally received both a case identifier and a task identifier, but previously they did not enforce
- 7.5 High severity
flowintel: Improper Limitation of a Pathname to a Restricted Directory
Affected versions of Flowintel allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable v
- 8.6 High severity
Affected versions of Flowintel improperly trust configuration keys supplied to the alerts…
Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines i
- 7.1 High severity
flowintel: Improper Limitation of a Pathname to a Restricted Directory
Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export.
- 9.9 Critical severity
flowintel: Server-Side Request Forgery
FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can submit an external reference URL can cause the application server to issue an H