CVE-2026-52476
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file.
Risk Assessment
An attacker could read sensitive data from the database, leading to confidentiality breach.
Recommendation
Upgrade aiflowy to a version later than 2.1.2 or apply patches to prevent SQL injection.
Other vulnerabilities in aiflowy
See all- CVE-2026-52475Medium
Cross Site Scripting (XSS) vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file.
- CVE-2026-52474High
An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file.
Original NVD description (English source)
SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file