Flowring Agentflow 4.0 contains a vulnerability in the /WebAgenda/SQLWin.do API endpoint. The endpoint exposes an unsafe sql parameter that can be manipulated by authenticated users to execute arbitrary SQL commands. This flaw permits attackers to read, modify, or delete data in the underlying database, potentially leading to loss of confidentiality, integrity, or availability. The weakness falls under CWE-749, indicating that a dangerous method or function was exposed.

The affected product is Flowring Technology Corp’s Agentflow 4.0, specifically any installation running a version prior to 2026/08/28. Administrators should verify the version of their Agentflow installation and assess whether /WebAgenda/SQLWin.do is exposed to external traffic.

The CVSS score of 8.7 classifies this issue as high severity. Although the EPSS score is below 1%, indicating a low probability of exploitation in the wild, the vulnerability remains significant for organizations that have granted user access to the affected endpoint. The flaw is remote and authenticated, so attackers must first authenticate to the system; once authenticated, they can construct malicious sql payloads using the exposed parameter. The vulnerability is not listed in the CISA KEV catalog as of this analysis, so no known widespread exploit is reported, yet the flaw still warrants immediate attention.