Critical 9.8Published Oct 19, 2026

CVE-2026-109442piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell

Updated under an hour ago (Oct 28, 2026, 2:30 AM ET)

Does this affect you?

It affects cas-bigdatalab piflow. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.84%, higher than 58% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for cas-bigdatalab piflow

Exploited in the last 30 days

piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary commands via subprocess.run without human approval or an allow-list, exposing environment secrets such as LLM API keys and database credentials.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-306
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.84% (percentile 58)
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Oct 20, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

cas-bigdatalab piflow cas_bigdatalab:piflow (from the name)	from 2.0.0 through 2.0.1	CNA record

References

References

https://www.lasso.security/vulnerability-database/cve-2026-109442	technical-description, exploit
https://github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/agents/tools.py#L114	technical-description
https://github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/server.py#L615	technical-description
https://www.vulncheck.com/advisories/piflow-2.0.0-through-2.0.1-unauthenticated-rce-via-chat-agent-exec-shell	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.