CVE-2026-7439: CWE-346: Origin Validation Error in berabuddies AgentFlow
AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation weakness through browser-driven or local cross-origin requests to abuse the localhost API and enable attack chains against the local control plane.
AI Analysis
Technical Summary
CVE-2026-7439 describes a weakness in berabuddies AgentFlow's local web API where the POST /api/runs and POST /api/runs/validate endpoints do not enforce content-type validation to require application/json. This origin validation error (CWE-346) permits attackers to bypass trust boundaries by submitting non-JSON content types, enabling abuse of the localhost API through browser-driven or local cross-origin requests. The vulnerability affects version 0 of AgentFlow. No known exploits are reported, and no official remediation or patch is currently available.
Potential Impact
Attackers can exploit the lack of content-type enforcement to bypass trust boundaries on sensitive local API operations. This may enable unauthorized actions against the local control plane of AgentFlow, potentially leading to abuse of local API functionality. The impact is limited by the requirement of local or browser-driven cross-origin access and the medium CVSS score reflects moderate risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should restrict access to the local API endpoints and consider implementing network-level controls to prevent unauthorized cross-origin requests to localhost. Monitor vendor channels for updates on patches or official mitigations.
CVE-2026-7439: CWE-346: Origin Validation Error in berabuddies AgentFlow
Description
AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation weakness through browser-driven or local cross-origin requests to abuse the localhost API and enable attack chains against the local control plane.
CVSS v4.0
Score 4.8medium
Affected software
pkg:github/berabuddies/agentflowRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-7439 describes a weakness in berabuddies AgentFlow's local web API where the POST /api/runs and POST /api/runs/validate endpoints do not enforce content-type validation to require application/json. This origin validation error (CWE-346) permits attackers to bypass trust boundaries by submitting non-JSON content types, enabling abuse of the localhost API through browser-driven or local cross-origin requests. The vulnerability affects version 0 of AgentFlow. No known exploits are reported, and no official remediation or patch is currently available.
Potential Impact
Attackers can exploit the lack of content-type enforcement to bypass trust boundaries on sensitive local API operations. This may enable unauthorized actions against the local control plane of AgentFlow, potentially leading to abuse of local API functionality. The impact is limited by the requirement of local or browser-driven cross-origin access and the medium CVSS score reflects moderate risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should restrict access to the local API endpoints and consider implementing network-level controls to prevent unauthorized cross-origin requests to localhost. Monitor vendor channels for updates on patches or official mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-04-29T15:46:44.053Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69f24c6ecbff5d86103a5326
Added to database: 04/29/2026, 18:22:38 UTC
Last enriched: 06/24/2026, 15:15:25 UTC
Last updated: 07/31/2026, 19:23:00 UTC
Views: 141
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.