qKnow vulnerabilities

CVEs whose affected-version data names the qKnow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111694Medium· 5.3

yesterday

qKnow through 2.4.3 Missing Authentication via /flyflow Workflow Endpoints

qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can POST sequential userId values t…

▾ Sunlitqiantongtech · qKnowvia CVEORG