CVE-2026-2095

An attacker without any prior authentication can exploit a specific functionality of the Agentflow system, which improperly verifies the identity of the requester. Exploitation of this functionality allows obtaining an authentication token assigned to a selected user account. With such a token, the attacker can log into the system with full permissions of that user, including potentially an administrative account.

An attacker can gain unauthorized access to the Agentflow system as any user, including an administrator, which can lead to complete system takeover, disclosure of sensitive data, and compromise of the integrity of processed information.

Patches available from the vendor should be applied according to the references (forum.flowring.com and TWCERT/CC)

Flowring Agentflow — versions indicated in the vendor's references