Agions vulnerabilities

Products

• taskflow-ai 1

Latest Agions CVEs

Newest publication first

1. CVE-2026-5831 Agions taskflow-ai terminal_execute handlers.ts os command injection

   Published 2026-04-09

   Medium·CVSS 5.3 EPSS 1.2%

   A security flaw has been discovered in Agions taskflow-ai up to 2.1.8. This impacts an unknown function of the file src/mcp/server/handlers.ts of the component terminal_execute. Performing a manipulation results in os command injection. The attack is possible to be carried out re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.