The vulnerability is a classic SQL Injection flaw located in the words parameter of the /WebAgenda/SMBAjaxAutoComplete.do API endpoint. An attacker can supply crafted input to execute arbitrary SQL commands against the database, potentially accessing, modifying, or deleting data. The weakness falls under CWE-89: Improper Neutralization of Special Elements used in an SQL Command.

The affected product is Flowring Technology Corp’s Agentflow 4.0. Versions released prior to 2025/08/08 contain the flaw, while later releases are assumed to include the fix.

The CVSS score of 9.3 indicates critical severity, and the EPSS score of less than 1% suggests low current exploitation probability. The vulnerability can be exploited remotely via the web API without authentication, making it readily reachable by attackers. Because it is not listed in the CISA KEV catalog, no publicly known exploits have yet been recorded. The primary attack vector is over the network to the unprotected SMBAjaxAutoComplete.do endpoint.