Vulnerability · Published Apr 29, 2026 · Assigned by VulnCheck

CVE-2026-7439AgentFlow Local Web API Content-Type Validation Bypass

Medium 4.4

In plain English

A medium-severity security flaw in AgentFlow from berabuddies. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 0% of all known vulnerabilities).

Severity (CVSS 3.1)4.4Medium

Exploit odds (30 days)<0.1%top 99.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation weakness through browser-driven or local cross-origin requests to abuse the localhost API and enable attack chains against the local control plane.

Affected products (as reported)

Vendor	Product	Versions
berabuddies	AgentFlow	0 – before 1667fa3

Weakness: CWE-346 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

References

https://github.com/berabuddies/agentflow/pull/18 issue-tracking
https://github.com/berabuddies/agentflow/commit/1667fa3 patch
https://www.vulncheck.com/advisories/agentflow-local-web-api-content-type-validation-bypass third-party-advisory