AgentFlow’s local web API accepts POST requests to the /api/runs and /api/runs/validate endpoints without enforcing application/json validation. This content‑type validation weakness enables attackers to send arbitrary payloads that are accepted as valid, allowing them to bypass trust‑boundary enforcement on sensitive operations. The result is unauthorized access to the local control plane, potentially permitting attackers to trigger other privileged actions or embed further exploitation steps.

The vulnerability affects the Berabuddies AgentFlow product. No specific version information is provided, so users should check whether their installed instance contains the affected API endpoints.

The CVSS score of 4.8 indicates moderate severity. EPSS data is not available and the vulnerability is not listed in CISA’s KEV catalog. The likely exploitation path is local: an attacker who can run scripts in the user’s browser or has other local access can craft requests that override the expected JSON content type and exploit the control‑plane API. While the risk is moderate, it can serve as a stepping stone in a larger attack chain against the local system.