EUVD-2026-66748

AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive...

CVE-2026-75415

AntFlow V2.0.0 suffers from an Incorrect Access Control flaw in the file JiMuMDCCommonsRequestLoggingFilter.java . This component retrieves the userid from the request header and uses it as the core identity verification mechanism . Because the header value is not independently validated, an atta...

CVE-2026-75414

AntFlow V2.0.0 contains a command execution vulnerability in ActivitiTest.java , where user-supplied JUEL (Java Unified Expression Language) expressions are evaluated without input filtering. This allows an attacker to craft malicious expressions that lead to arbitrary command execution on the af...

EUVD-2026-66746

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability...