CVE-2026-81659 — Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing
Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowinte…
Published: 2026-08-27 · CVSS: 7.1 · CVSS 4.0
Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7