qiantongtech vulnerabilities

Products

• qiantongtech/qknow 1

Latest qiantongtech CVEs

Newest publication first

1. CVE-2026-111694 qKnow through 2.4.3 Missing Authentication via /flyflow Workflow Endpoints

   Published 2026-10-16

   Medium·CVSS 6.9 EPSS 0.56%

   qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can POST sequential userId values to /flyflow/userById or call roleAll and dep...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.