Log in Start free

Vulnerability · Published Apr 12, 2026 · Assigned by VulDB

CVE-2026-6125Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection

Medium 6.3

In plain English

A medium-severity code injection in warm-flow from Dromara. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.3%top 77.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavenorg.dromara.warm:warm-flow-plugin-modes-sb1.8.5GHSA-822v-8w6h-5jxp

Affected products (as reported)

VendorProductVersions
Dromara warm-flow 1.8.01.8.11.8.21.8.31.8.4

Weakness: CWE-94, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References