Skip to content
OpenAdvisories

Product · berabuddies

AgentFlow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-7466

    AgentFlow Arbitrary Python Pipeline Execution via pipeline_path

    AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce …

    berabuddies AgentFlow