External risk intelligence

Flowring Agentflow Unrestricted File Upload Command Execution.

CVE advisorySeverity: CRITICAL (CVSS 9.3)

CVE-2026-96431

The vulnerability exists in a web application API endpoint (/WebAgenda/download/uploadFile.jsp) within a business process management system. Such applications are commonly deployed as web-based interfaces or portals, making the API endpoint likely to be accessible over a network or from the internet in standard business deployments.

Unrestricted File Upload

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This advisory concerns a security flaw in the Flowring Agentflow web application that allows authenticated users to upload malicious files. When exploited, this vulnerability could enable attackers to execute arbitrary system commands, potentially leading to unauthorized access and control. The primary concern is to confirm if this specific technology is in use and, if so, to understand the extent of potential exposure.

Unrestricted file uploads can lead to command execution.
This affects systems managing business processes.
Confirm relevance and assess exposure.

Attack Path

How an attacker could exploit the issue

Attackers with authenticated access can upload malicious files through a specific API endpoint, potentially leading to the execution of arbitrary system commands. This vulnerability can be triggered by an authenticated user uploading a specially crafted file. The risk is the execution of arbitrary system commands.

Authenticated access required.
Upload a malicious file.
Execute arbitrary system commands.

Live Threat

Current exploitation, exposure, and threat context

Remote authenticated users could execute arbitrary system commands by uploading a malicious file to a specific API endpoint. This could affect the overall system integrity and potentially lead to unauthorized access or disruption of services when supported by the advisory.

System commands could be executed.
Malicious file uploaded to API endpoint.
Unauthorized system access or disruption.

Operational Fix

Recommended remediation, mitigation, and detection steps

The vulnerability in the Agentflow /WebAgenda/download/uploadFile.jsp API endpoint suggests that the application owner or platform team is likely responsible for remediation. The first step is to identify all instances of this technology, assess their network exposure, confirm business criticality, and locate the accountable owner to prioritize and plan remediation efforts.

Identify the application owner.
Verify system exposure and criticality.
Plan vendor coordination or remediation.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is Flowring Agentflow?

Flowring Agentflow is a business process management (BPM) system designed to help organizations automate, track, and coordinate complex internal workflows. It acts as a central platform for managing operational processes, often providing web-based portals that allow users to interact with these business tasks and documentation.

What does CVE-2026-96431 mean?

This CVE describes a security weakness known as Unrestricted Upload of File with Dangerous Type (CWE-434). In simple terms, the software fails to properly check the types of files being uploaded to its server. This flaw allows someone to upload a malicious file that the system mistakenly accepts and processes, which can then be used to run unauthorized commands on the underlying server.

How is this vulnerability triggered?

The vulnerability is triggered when a user sends a specially crafted file to a specific API endpoint used for file uploads. Crucially, the system requires the attacker to be authenticated, meaning they must have valid credentials to access the application. An unauthenticated user cannot trigger this specific bug, as the system restricts this file-handling process to those who are already logged into the platform.

Is my system at risk for CVE-2026-96431?

According to Halo Surface Signal, this vulnerability is considered likely to be internet-facing. Because the affected API endpoint is part of a web-based business process management tool, it is frequently deployed in ways that are accessible over a network or the public internet. If your instance of Agentflow is reachable from outside your private network, it is a higher priority for review.

What are the first steps to take?

Start by identifying every instance of Agentflow currently running in your environment. Once identified, confirm the specific version in use and determine if it is exposed to the internet. Locate the internal team or individual responsible for the application to discuss the findings and coordinate with the vendor to ensure you are on a secure, updated version.

References

zuso.ai/cve-advisory/advisory

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.