CVE-2026-7439 | berabuddies AgentFlow Localhost API /api/runs origin validation (1667fa3)

April 29, 2026 Yanac

A vulnerability marked as problematic has been reported in berabuddies AgentFlow. Impacted is an unknown function of the file /api/runs of the component Localhost API. Performing a manipulation results in origin validation error.

This vulnerability is cataloged as CVE-2026-7439. The attack must be initiated from a local position. There is no exploit available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More