VULNERABILITY INTELLIGENCE

CVE-2026-81659

EPSS probability0.45%
CISA KEVNot currently listed
Published2026-08-27
Last modified2026-08-28

Description

Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export.

Weakness classification

  • 5a6e4751-2f3f-4070-9419-94fb35b644e8: CWE-22

Primary references