AppFlowy-IO

Products

ProductCVEsExploitedLatest
AppFlowy-Cloud4–Sep 10, 2026

Exploited and recent CVEs

  • CVE-2026-88898 Medium 6.5 AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint 0.4%
  • CVE-2026-85622 Medium 5.3 AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket 0.4%
  • CVE-2026-85619 High 7.5 AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API 0.6%
  • CVE-2026-16007 High 7.1 Authenticated SQL Injection in AppFlowy 0.3%