Skip to content
OpenAdvisories

Product · qiantongtech

qKnow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-111694

    qKnow through 2.4.3 Missing Authentication via /flyflow Workflow Endpoints

    qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can POST sequential userId values to /flyflow/userById or…

    qiantongtech qKnow