CVE-2026-102457: DigiWin｜EasyFlow .NET - Arbitrary File Read
EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrary system files.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of Digiwin EasyFlow .NET are exposed if an authenticated user can reach the affected functionality remotely. The provided information does not identify affected versions or configurations.
What does an attacker need to exploit it?
An attacker needs valid authentication and network access to the EasyFlow .NET service. No user interaction is required, and exploitation is described as low complexity.
What is the likely impact if exploitation succeeds?
An attacker can download arbitrary files from the system, which may expose sensitive information. The supplied severity vector indicates high confidentiality impact, with no stated integrity or availability impact.