SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file

Info

CVECVE-2026-52476

First seen2026-07-21 23:16 UTC

Disclosed2026-07-21 21:16 UTC

Last updated2026-07-21 23:16 UTC

Channel statusauto

Summary

SQL Injection vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://github.com/Y4y17/CVE/blob/main/AiFlowy/SQL%20Injection.md

Timeline

2026-07-21 nvd_ingest NVD