Skip to content
OpenAdvisories

Product · berabuddies

AgentFlow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-7439

    AgentFlow Local Web API Content-Type Validation Bypass

    AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can expl…

    berabuddies AgentFlow