Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary user authentication token and log into the system as any user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-10 | 4 | Disclosure4 |
| 2026-02-15 | 1 | Disclosure1 |
CVE-2026-2095 Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbi… https://www.cve.org/CVERecord?id=CVE-2026-2095
Post summary
The text discloses that CVE-2026-2095 is an authentication bypass vulnerability in Agentflow, enabling remote attackers to exploit a specific functionality.
🚨 CRITICAL: All Flowring Agentflow versions vulnerable to authentication bypass (CVE-2026-2095). Remote attackers can gain full access — no patch yet! Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-2095-cwe-288-authentication-bypass-using--1f37d3de #Of... https://t.co/W00z1uDRo9
Post summary
All Flowring Agentflow versions are vulnerable to an authentication bypass (CVE-2026-2095) with remote attackers able to gain full access, and no patch is currently available.
CVE-2026-2095 (CVSS:9.3, CRITICAL) is Analyzed. Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to..https://nvd.nist.gov/vuln/detail/CVE-2026-2095 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-2095 as a critical authentication bypass flaw in Flowring’s Agentflow, providing CVSS details but no PoC, exploit, or patch information.
CVE-2026-2095 Authentication Bypass in Agentflow Enabling Unauthorized User Token Retrieval https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2095
Post summary
A new authentication bypass vulnerability in Agentflow (CVE‑2026‑2095) permits unauthorized user token retrieval, as reported on Vulmon.
🔴 CVE-2026-2095 - Critical Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain arbitrary user authentic... https://www.thehackerwire.com/vulnerability/CVE-2026-2095/ https://t.co/GNZdAAydHJ
Post summary
The tweet announces CVE‑2026‑2095, an Authentication Bypass vulnerability in Agentflow, highlighting its critical severity but providing no details on PoC, exploitation, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | flowring | agentflow | - | - | - |