Medium severity6.8NVD Advisory· Published Sep 10, 2026· Updated Sep 10, 2026

CVE-2026-52097

Description

An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, _afLaunchLocalUri (url_launcher.dart), OpenFilex.open, localPathRegex (common_patterns.dart) components

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Appflowy Io/Appflowyreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <0.11.8

Patches

Vulnerability mechanics

References

github.com/AppFlowy-IO/AppFlowy/blob/main/frontend/appflowy_flutter/lib/core/helpers/common_patterns.dartnvd
github.com/AppFlowy-IO/AppFlowy/blob/main/frontend/appflowy_flutter/lib/core/helpers/url_launcher.dartnvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000