Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/27 10:23 a.m.6 views

CVE-2026-81662 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

8.6CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder