SQL Injection in Appflowy-Io Appflowy-Cloud
CVE-2026-16007
AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underlying SQL database.
Vulnerability class: SQL Injection
Affected products
- Appflowy-io Appflowy-cloud — versions 0
Weakness classification (CWE)
References
- ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a (exploit, third-party-advisory)