PT-2026-32157 · Unknown · Dromara Warm-Flow

Anch0R · CVE-2026-6125 · Published 2026-04-12 · Updated 2026-04-12

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dromara warm-flow versions up to 1.8.4

Description A security flaw exists in Dromara warm-flow up to version 1.8.4. The issue resides in the SpelHelper.parseExpression function within the /warm-flow/save-json file of the Workflow Definition Handler component. Manipulation of the listenerPath, skipCondition, and permissionFlag arguments can lead to code injection. The attack can be performed remotely, and an exploit has been publicly released.

Recommendations Update to a version later than 1.8.4.

Exploit

Fix

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

CVE-2026-6125

GHSA-822V-8W6H-5JXP

Affected Products

Dromara Warm-Flow

References · 10

• 🔥 https://gitee.com/dromara/warm-flow/issues/IHURVQ · Exploit
• https://osv.dev/vulnerability/GHSA-822v-8w6h-5jxp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6125 · Security Note
• https://github.com/dromara/warm-flow · Note
• https://vuldb.com/submit/793322 · Note
• https://vuldb.com/vuln/356989/cti · Note
• https://vuldb.com/vuln/356989 · Note
• https://gitee.com/dromara/warm-flow/pulls/387 · Note
• https://gitee.com/dromara/warm-flow · Note
• https://twitter.com/VulmonFeeds/status/2043278894107595096 · Twitter Post