Auth bypass in Cas-Bigdatalab Piflow
CVE-2026-109442
piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary commands via subprocess.run without human approval or an allow-list, exposing environment secrets such as LLM API keys and database credentials.
Vulnerability class: Broken Authentication
Published .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/… (technical-description)
- github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/… (technical-description)
- Lasso.security Advisory (technical-description, exploit)
- VulnCheck Advisory: piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell (third-party-advisory)
Frequently asked questions
- What is CVE-2026-109442?
- CVE-2026-109442 is a critical-severity vulnerability in Cas-Bigdatalab Piflow, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2026-10-20.
- How severe is CVE-2026-109442?
- Critical severity. CVSS v3 base score is 9.8 out of 10.