What’s Vulnerable › Products

FLOWRING Agentflow BPM vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your FLOWRING Agentflow BPM version is affected

Latest FLOWRING Agentflow BPM vulnerabilities

• CVE-2026-2099 — Flowring｜AgentFlow - Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2026-2098 — Flowring｜AgentFlow - Reflected Cross-site Scripting (CVSS 6.1)
• CVE-2026-2097 — Flowring｜Agentflow - Arbitrary File Upload (CVSS 8.8)
• CVE-2026-2096 — Flowring｜Agentflow - Missing Authenticaton (CVSS 9.8)
• CVE-2026-2095 — Flowring｜Agentflow - Authentication Bypass (CVSS 9.8)
• CVE-2025-11899 — Flowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key (CVSS 8.1)
• CVE-2025-11898 — Flowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal (CVSS 7.5)
• CVE-2025-3709 — Flowring Technology Agentflow - Account Lockout Bypass (CVSS 9.8)
• CVE-2022-39038 — FLOWRING Agentflow BPM - Broken Access Control (CVSS 8.8)
• CVE-2022-39037 — FLOWRING Agentflow BPM - Path Traversal (CVSS 7.5)
• CVE-2022-39036 — FLOWRING Agentflow BPM - Arbitrary File Upload (CVSS 9.8)