Skip to content

Vendor

berabuddies vulnerabilities

2 published CVES affecting berabuddies, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of berabuddies alerts

Products

Latest berabuddies CVEs

Newest publication first

  1. CVE-2026-7466 AgentFlow Arbitrary Python Pipeline Execution via pipeline_path

    Published
    HighCVSS 7.7 EPSS 0.34%

    AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce requests to the local...

  2. CVE-2026-7439 AgentFlow Local Web API Content-Type Validation Bypass

    Published
    MediumCVSS 4.8 EPSS 0.09%

    AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.