CVE-2026-71550 | SuiteCRM Workflow Controller controller.php require_once aow_action path traversal

A vulnerability was found in SuiteCRM. It has been declared as critical. Impacted is the function require_once of the file modules/AOW_WorkFlow/controller.php of the component Workflow Controller. Such manipulation of the argument aow_action leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-71550. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More