Executive brief
AiFlowy, an open-source workflow or automation platform, contains a security flaw that allows unauthorized users to upload malicious files. By tricking a legitimate user into opening a specially crafted link or file hosted on the server, an attacker can steal login tokens, hijack user sessions, or perform unauthorized actions on the victim's behalf. This vulnerability does not require a password to exploit and can lead to identity theft or the spread of malware.
Technical details
A stored Cross-Site Scripting (XSS) vulnerability exists in AiFlowy versions up to and including 2.1.2. The 'UploadController.java' file, specifically the '/api/v1/commons/uploadPrePath' endpoint, fails to restrict file types and is marked with the 'SaIgnore' annotation, bypassing authentication checks. A remote, unauthenticated attacker can upload arbitrary files (such as HTML containing malicious JavaScript). Because the application serves these files from the '/static/' directory without proper content-type enforcement or sanitization, the script executes in the context of the victim's browser when accessed. This can lead to session hijacking via 'aiflowy-token' theft and unauthorized API interactions.
Affected products
- AiFlowy AiFlowy <= 2.1.2
Timeline
- 2026-07-21: disclosed: Initial disclosure via GitHub and NVD publication