CVE-2026-109442 - piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell
CVE ID :CVE-2026-109442 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the...