CVE-2026-124328 | FlowCI flow-core-x up to 1.23.49 Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run condition code injection

A vulnerability was found in FlowCI flow-core-x up to 1.23.49. It has been classified as critical. The affected element is the function ConditionManagerImpl.run of the file core/src/main/java/com/flowci/core/common/manager/ConditionManagerImpl.java of the component Groovy Script Evaluation. The manipulation of the argument condition leads to code injection.

This vulnerability is uniquely identified as CVE-2026-124328. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More