Skip to content

Product

TeamWiseFlow xiaobei vulnerabilities

1 published CVE affecting TeamWiseFlow xiaobei, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest TeamWiseFlow xiaobei CVEs

Newest publication first

  1. CVE-2026-85667 xiaobei through 5.5.2 Unauthenticated Webhook Message Injection

    Published
    CriticalCVSS 9.3 EPSS 0.70%

    xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via the /webhook_worktool handler and exploit un...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.