CVE-2026-2096: Flowring Agentflow

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality.

Affected products

• Flowring Agentflow: affected versions not specified

Published 2026-02-10. Last modified 2026-06-17.