CVE-2026-7439 AgentFlow Local Web API Content-Type Validation Bypass
Attackers can bypass content-type validation on AgentFlow's local API to abuse trust boundaries and enable attack chains against the local control plane.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-7439?
CVE-2026-7439 is a medium-severity vulnerability in berabuddies AgentFlow, published on 29 Apr 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation weakness through browser-driven or local cross-origin requests to abuse the localhost API and enable attack chains against the local control plane.
Weakness: CWE-346
Which versions are affected by CVE-2026-7439?
How do I fix CVE-2026-7439?
No fix has been published for CVE-2026-7439 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-7439 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-7439 exists.
Sources
Also known as GHSA-7vgq-6q52-5p23.