Flowring Agentflow Arbitrary File Reading Vulnerability

An arbitrary file reading vulnerability has been identified in Flowring's Agentflow version 4.0. This vulnerability allows unauthenticated remote attackers to exploit relative path traversal to download arbitrary system files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing attackers to read confidential information or configuration files that could be used in further attacks.

Remediation

The vendor has released a patch for this vulnerability, which is available through their CRM system.