duo-agentflow-auditor

Duo AgentFlow Auditor AI 代码安全 — 捕获 SAST 在 AI 生成代码中遗漏的问题 基于 GitLab Duo Agent 平台 40-62% 的 AI 生成代码存在安全漏洞。 传统 SAST 能捕获 CVE。而我们能捕获 SAST 遗漏的问题 — 提示注入、LLM 输出执行、不安全的 ML 反序列化。 快速开始 · 架构 · 检测规则 · 设置指南 · 实现 问题 AI 加速了代码生成，但也带来了新的安全瓶颈： 问题| 影响 ---|--- 安全审查使 MR 堵塞数小时甚至数天| 每位团队成员每周浪费 7 小时 AI 使合规管理更加困难| 70%...

CVE-2026-96431

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2026-96430

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-96440

Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to write files to arbitrary locations outside the intended upload directory via...

CVE-2026-96429

SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2026-96428

SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter...

CVE-2026-96440

Flowring Agentflow 4.0 (versions prior to 2023/03/24) is vulnerable to a Path Traversal flaw in the /WebAgenda/download/uploadFile.jsp API endpoint. This vulnerability allows remote authenticated users to write files to arbitrary locations outside the intended upload directory by manipulating the...

EUVD-2026-88665

Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to write files to arbitrary locations outside the intended upload directory via...

CVE-2026-96440 Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）

Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to write files to arbitrary locations outside the intended upload directory via...

CVE-2026-96440 Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）

Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to write files to arbitrary locations outside the intended upload directory via...

CVE-2026-96431 Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2026-96431 Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2026-96431

The Flowring Agentflow 4.0 software (versions before 2023/03/24 ) is vulnerable to an Unrestricted Upload of File with Dangerous Type via the /WebAgenda/download/uploadFile.jsp API endpoint. This flaw allows remote authenticated users with low privileges to execute arbitrary system commands by up...

EUVD-2026-88662

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2026-96430 Flowring Agentflow 4.0 - Exposed Dangerous Method or Function

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-96430

Flowring Agentflow 4.0 (versions before 2026/08/28) contains an Exposed Dangerous Method or Function within the /WebAgenda/SQLWin.do API endpoint. This vulnerability allows remote authenticated users to execute arbitrary SQL commands via the sql parameter . The impact includes high severity conse...

EUVD-2026-88659

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-96430 Flowring Agentflow 4.0 - Exposed Dangerous Method or Function

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-96429

Flowring Agentflow 4.0 (versions prior to 2025/08/08 ) is vulnerable to SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint. This flaw allows remote attackers to execute arbitrary SQL commands by manipulating the id parameter. The vulnerability has a CRITICAL base severity score ...

CVE-2026-96429 Flowring Agentflow 4.0 - SQL Injection

SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the id parameter...