Flowring Agentflow Missing Authentication Vulnerability Allowing Unauthenticated Database Access

A missing authentication vulnerability has been identified in Flowring's Agentflow, all versions. This vulnerability allows unauthenticated remote attackers to read, modify, and delete database contents by exploiting a specific functionality.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of database information, including the ability to delete data.

Remediation

Users are advised to implement the authentication measures outlined in the official Flowring forum post regarding this vulnerability. For issues that have already caused operational disruptions, contact Flowring's customer service.