What’s Vulnerable › Products

AppFlowy-IO AppFlowy-Cloud vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your AppFlowy-IO AppFlowy-Cloud version is affected

Latest AppFlowy-IO AppFlowy-Cloud vulnerabilities

• CVE-2026-88898 — AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint (CVSS 6.5)
• CVE-2026-85622 — AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket (CVSS 5.3)
• CVE-2026-85619 — AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API (CVSS 7.5)
• CVE-2026-16007 — Authenticated SQL Injection in AppFlowy (CVSS 7.1)