External risk intelligence

Flowring Agentflow Hard-coded Key Allows User Impersonation.

CVE advisorySeverity: CRITICAL (CVSS 9.2)

CVE-2025-11899

Agentflow is a business process management platform often deployed as an internet-facing web application to facilitate remote access for organizational workflows and user authentication. Because it serves as a central hub for user logins and enterprise processes, it is commonly exposed to the network to support external and remote users, making it a likely target for internet-reachable exploitation.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A vulnerability in Agentflow, a business process management platform, could allow unauthorized individuals to log in as any user by exploiting a hard-coded cryptographic key. This issue affects how the system verifies user credentials, potentially exposing sensitive information or unauthorized access to system functions. The main concern is confirming relevance and exposure to our systems.

Weak key management allows unauthorized user access.
Critical access control flaw impacts system integrity.
Verify if Agentflow is used and assess exposure.

Attack Path

How an attacker could exploit the issue

An attacker can exploit a hard-coded cryptographic key in Agentflow to bypass authentication and log in as any user, provided they can first discover a valid user ID. This vulnerability allows unauthenticated, remote attackers to leverage the fixed key to generate necessary verification information, ultimately gaining unauthorized access to the system.

Requires knowledge of a user ID.
Attacker generates verification information.
Leads to unauthorized user access.

Live Threat

Current exploitation, exposure, and threat context

An unauthenticated remote attacker could exploit a hard-coded cryptographic key in Agentflow to generate valid verification information, allowing them to log in as any user. This attack requires the attacker to first obtain a valid user ID.

User account access
Unauthenticated remote network access
Unauthorized system access

Operational Fix

Recommended remediation, mitigation, and detection steps

The Flowring Agentflow application's use of hard-coded cryptographic keys presents a critical risk, allowing unauthenticated remote attackers to impersonate any user after obtaining a user ID. Given Agentflow's typical deployment as a business process management platform supporting remote access, infrastructure, platform, and security teams should collaborate. The immediate first step is to identify all instances of Agentflow, confirm their network reachability and business criticality, and then assign ownership for a risk-based remediation plan.

Assign issue ownership to platform and security teams.
Verify Agentflow instances and network exposure.
Plan remediation based on identified business risk.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is Flowring Agentflow?

Agentflow is a business process management (BPM) platform designed to automate and manage complex organizational workflows. Organizations use it as a centralized hub to coordinate internal operations, handle document routing, and manage user identities. Because it handles sensitive business logic, it frequently serves as a gateway for employees to access organizational tasks remotely, often functioning as a web-based portal that requires robust authentication to protect enterprise data.

How does CVE-2025-11899 allow unauthorized access?

This vulnerability is classified as a Use of Hard-coded Cryptographic Key (CWE-321). In this case, Agentflow relies on a fixed, embedded secret key to perform security tasks, such as generating the digital verification information used to confirm a user's identity. Because this key is hard-coded into the software rather than unique to each installation, an attacker who identifies the key can generate their own valid authentication credentials to impersonate any user within the system.

What must an attacker do to trigger this vulnerability?

To exploit this flaw, an attacker needs to perform two primary actions: obtain the hard-coded key and discover a valid user ID for the target system. Once these requirements are met, they can craft the necessary verification information to bypass the standard login process. Simply knowing the key is insufficient on its own; without a valid user ID to target, the attacker cannot successfully authenticate as a specific user account.

Is my instance of Agentflow at risk?

If your Agentflow instance is internet-facing, it is at higher risk. According to Halo Surface Signal, Agentflow is commonly deployed as a web application accessible over the network to support remote workflows. Any system reachable from the public internet increases the likelihood that an attacker can attempt to probe the application and interact with its authentication mechanisms remotely.

What are the first steps to address this threat?

Begin by conducting an inventory to locate all deployed instances of Agentflow within your environment. Once identified, evaluate the network placement of each server to determine if they are exposed to the public internet. Coordinate with the platform and security teams to review system logs and assign ownership for a risk-based remediation plan, ensuring that the necessary security updates or configuration changes are prioritized for the most critical systems.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.