CVE-2026-2095 — Flowring｜Agentflow - Authentication Bypass
Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary use…
Published: 2026-02-10 · CVSS: 9.3 · CVSS 4.0
Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary user authentication token and log into the system as any user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7