CNNVD-202510-2495 Information
Oct 17, 2025
cve
CNNVD ID
CNNVD-202510-2495
Related CVE
- CNNVD Published: 2025-10-17
Description (Chinese)
Flowring Agentflow是中国华苓（Flowring）公司的一个智能流程自动化(RPA)平台。 Flowring Agentflow存在安全漏洞，该漏洞源于使用硬编码加密密钥，可能导致未经验证的远程攻击者利用固定密钥生成验证信息，从而以任意用户身份登录系统。
Description (English)
Flowring Agentflow is an intelligent process automation (RPA) platform for Flowring China. There is a security loophole in Flowing Agentflow, which stems from the use of a hard-coded encryption key, which could lead to uncertified remote assailants using a fixed key to generate authentication information and thus log in to the system as any user.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
华苓
Published
2025-10-17
Last Modified
2026-02-24
References
https://www.twcert.org.tw/en/cp-139-10439-0bd15-2.html https://www.twcert.org.tw/tw/cp-132-10438-1173e-1.html
Patch
https://www.flowring.com/agentflow/
Share on: