CVE-2026-124850

A SQL injection vulnerability exists in the database migration script of flowintel versions prior to 4.0.0 . The root cause is the lack of parameterization, as the migration process interpolates stored connector identifier values directly into SQL statements. An attacker with prior write access t...