CNNVD-202602-1661 Information
Feb 10, 2026
cve
CNNVD ID
CNNVD-202602-1661
Related CVE
- CNNVD Published: 2026-02-10
Description (Chinese)
Flowring Agentflow是中国华苓（Flowring）公司的一个智能流程自动化(RPA)平台。 Flowring Agentflow存在代码问题漏洞，该漏洞源于任意文件上传，可能导致经过身份验证的远程攻击者上传并执行Web后门，从而在服务器上执行任意代码。
Description (English)
Flowring Agentflow is an intelligent process automation (RPA) platform for Flowring China. Flowing Agentflow has a code loophole, which stems from the uploading of any document, which may lead to the uploading and implementation of the back door of Web by a remotely identified assailant, thus enforcing any code on the server.
Hazard Level
Medium
Vulnerability Type
代码问题
Affected Vendor
华苓
Published
2026-02-10
Last Modified
2026-02-24
References
https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html
Patch
https://www.flowring.com/agentflow/
Share on: