Flowring Technology vulnerabilities
Published CVEs affecting Flowring Technology products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-11899
High · 8.1
CWE-321 Oct 17, 2025
Flowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key
Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information, thereby logging into the system as any user. Attacker must first obtain an user ID in order to exploit this vulnerability.
CVE-2025-11898
High · 7.5
CWE-23 Oct 17, 2025
Flowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal
Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.