CVE-2026-7466CWE-94

AgentFlow Arbitrary Python Pipeline Execution via pipeline_path

High · published April 29, 2026

CVSS v4.0
7.7
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce requests to the local AgentFlow API to load and execute existing Python pipeline files on disk, resulting in code execution in the context of the user running AgentFlow.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00644 · 50.2th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-04-29T18:44Z
EPSS history
Timeline
  • 29 APR 18:44Z
    AgentFlow Arbitrary Python Pipeline Execution via pipeline_path
    cvelistv5