flowintel vulnerabilities

Newest CVEs

• CVE-2026-81827

  Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input

  flowintel · flowintel

  Medium6.9
• CVE-2026-81826

  Flowintel Fails to Invalidate Active Sessions After Password Change

  flowintel · flowintel

  Critical9.1
• CVE-2026-81820

  Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes

  flowintel · flowintel

  Medium5.1
• CVE-2026-81819

  Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments

  flowintel · flowintel

  Medium5.3
• CVE-2026-81818

  Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges

  flowintel · flowintel

  High8.6
• CVE-2026-81817

  Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification

  flowintel · flowintel

  High7.2
• CVE-2026-81814

  Flowintel Stored XSS in Calendar via Malicious Case Title

  flowintel · flowintel

  Medium5.1
• CVE-2026-81753

  Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content

  flowintel · flowintel

  Medium5.1
• CVE-2026-81743

  Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

  flowintel · flowintel

  High7.5
• CVE-2026-81662

  Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

  flowintel · flowintel

  High8.6