CVE-2025-11898

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

More information : https://www.twcert.org.tw/en/cp-139-10439-0bd15-2.html