CVE-2026-75414: n/a

In AntFlow V2.0.0, the file ActivitiTest.java enables execution of JUEL expressions without proper input filtering. This lack of validation leads to a command execution vulnerability classified under CWE-94 (Improper Control of Generation of Code). The vulnerability allows remote attackers to execute arbitrary commands on the affected system without authentication or user interaction. No patch or official remediation guidance is currently available, and no known exploits are reported in the wild.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary commands on the vulnerable system, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability, as reflected by the CVSS vector (C:H/I:H/A:H).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to affected systems and avoid exposing the vulnerable component to untrusted users.