CVE-2026-81743 | Flowintel up to 3.3.0 Log Path Validation validate_log_file_name LOG_FILE code injection

August 27, 2026 Yanac

A vulnerability classified as problematic has been found in Flowintel up to 3.3.0. This vulnerability affects the function validate_log_file_name of the component Log Path Validation. This manipulation of the argument LOG_FILE causes code injection.

This vulnerability is tracked as CVE-2026-81743. The attack is possible to be carried out remotely. No exploit exists.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More