CVE-2025-3709: Flowring Agentflow

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack.

Affected products

• Flowring Agentflow: version 4.0 only

Published 2025-05-02. Last modified 2026-06-17.