CVE-2026-2096: Flowring｜Agentflow - Missing Authenticaton

Published Feb 10, 2026

Updated

Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality.

Affected Software

2 affected components

Flowring Agentflow

Event History

Feb 10, 2026

CVE Published

via MITRE·06:59 AM

Data Sourced

via MITRE·06:59 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-2096?

CVE-2026-2096 is classified as a critical vulnerability due to its potential for unauthorized access and data manipulation.

How do I fix CVE-2026-2096?

To fix CVE-2026-2096, implement proper authentication measures for accessing sensitive functionalities in your Flowring Agentflow application.

What impact does CVE-2026-2096 have on my systems?

CVE-2026-2096 allows unauthenticated attackers to read, modify, and delete database contents, potentially compromising sensitive information.

Which software is affected by CVE-2026-2096?

CVE-2026-2096 affects the Flowring Agentflow software.

How can I determine if I am vulnerable to CVE-2026-2096?

You can determine your vulnerability to CVE-2026-2096 by checking if your version of Flowring Agentflow has exposed functionalities without proper authentication.