CVE-2026-96440

Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to write files to arbitrary locations outside the intended upload directory via the path parameter.

  • Published Sep 29, 2026
  • CVSS 7.1 high
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-96440 at the National Vulnerability Database