⚠️ CVE-2026-7466 (CVSS 8.8) — AgentFlow Arbitrary Python Code Execution

[afip-bot]

Security Advisory: CVE-2026-7466

CVSS Score: 8.8 (HIGH)
Published: 2026-04-29T19:16:27.013Z
Severity: HIGH

Description

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce requests to the local AgentFlow API to load and execute existing Python pipeline files on disk, resulting in code execution in the context of the user running AgentFlow.

Why this repo may be affected

This repository uses FastAPI and Python for API development. If AgentFlow or similar pipeline execution patterns are used, this vulnerability could allow remote code execution through pipeline path manipulation.

Attack Vector

• Remote: Yes
• Authentication Required: No
• User Interaction: No
• Scope: Changed

Recommended Actions

1. Immediate: Search for AgentFlow usage: grep -r "agentflow\|pipeline_path" .
2. Review: Check if any pipeline execution endpoints accept user-controlled paths
3. Patch: If AgentFlow is used, update to the latest patched version
4. Validate: Implement strict path validation and sandboxing for any pipeline execution
5. Test: Add security tests for path traversal and code injection

References

• fix: harden web API pipeline loading and request validation agentenv/agentflow#18
• https://www.vulncheck.com/advisories/agentflow-arbitrary-python-pipeline-execution-via-pipeline-path

Remediation Priority

CRITICAL - Arbitrary code execution vulnerability with no authentication required

---

Detected automatically by AFIP Risk Radar | Scan window: last 30h | CVE-2026-7466