---
id: CVE-2026-7466
title: AgentFlow Arbitrary Python Pipeline Execution via pipeline_path
summary: >-
  AgentFlow contains an arbitrary code execution vulnerability that allows
  attackers to execute local Python pipeline files by supplying a
  user-controlled pipeline_path parameter to the POST /api/runs and POST
  /api/runs/validate endpoints.…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-94
vendor: berabuddies
product: AgentFlow
affected:
  - AgentFlow < 1667fa3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-04-30T13:05:45.431086Z'
published: '2026-04-29'
updated: '2026-11-08'
sourceUpdated: '2026-11-08T14:08:49.136Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-7466'
references:
  - url: 'https://github.com/berabuddies/agentflow/pull/18'
  - url: >-
      https://github.com/berabuddies/agentflow/pull/18/changes/7e61b6ce846b3d700456e4874394dc868905a9f2
  - url: >-
      https://www.vulncheck.com/advisories/agentflow-arbitrary-python-pipeline-execution-via-pipeline-path
tags:
  - cve.org
epss: 0.00343
epssPercentile: 0.28014
ingestedAt: '2026-11-08T14:51:22.256Z'
---

## Overview

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter to the POST /api/runs and POST /api/runs/validate endpoints. Attackers can induce requests to the local AgentFlow API to load and execute existing Python pipeline files on disk, resulting in code execution in the context of the user running AgentFlow.

## Affected

- `AgentFlow < 1667fa3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.