Skip to content
OpenAdvisories

Vendor

cas-bigdatalab

1 known vulnerabilities.

Products

piflow 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-109442

    piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell

    piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary co…

    cas-bigdatalab piflow