CVE-2026-52474
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file.
Risk Assessment
An attacker can leak sensitive data such as configurations or user data, potentially compromising system security.
Recommendation
Upgrade aiflowy to a version newer than 2.1.2 if a patch is available.
Other vulnerabilities in aiflowy
See all- CVE-2026-52476High
SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file.
- CVE-2026-52475Medium
Cross Site Scripting (XSS) vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file.
Original NVD description (English source)
An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file.