FlowCI Vulnerability Exposes CI/CD Systems to Remote Code Injection (CVE-2026-124328)
– A newly disclosed security vulnerability in FlowCI could allow attackers to execute malicious code through its Groovy script evaluation functionality. The vulnerability, tracked as CVE-2026-124328, affects FlowCI’s flow-core-x component and could put development environments and the systems connected to them at risk.
Read More