PT-2026-35976 · Agentflow · Agentflow

Published 2026-04-29 · Updated 2026-04-29 · CVE-2026-7466

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AgentFlow (affected versions not specified)

Description An arbitrary code execution issue exists where attackers can execute local Python pipeline files. This occurs by supplying a user-controlled pipeline path parameter to the "POST /api/runs" and "POST /api/runs/validate" endpoints. This allows requests to the local API to load and execute existing Python pipeline files on disk, leading to code execution within the context of the user running the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-7466

Affected Products

Agentflow

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-7466 · Security Note
• https://github.com/berabuddies/agentflow/pull/18 · Note
• https://github.com/berabuddies/agentflow/pull/18/changes/7e61b6ce846b3d700456e4874394dc868905a9f2 · Note
• https://vulncheck.com/advisories/agentflow-arbitrary-python-pipeline-execution-via-pipeline-path · Note
• https://twitter.com/CVEnew/status/2049578371626176992 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2049580542748737751 · Twitter Post