High severityNVD Advisory· Published Aug 27, 2026

CVE-2026-81659

Description

Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Flowintel/Flowintelreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/flowintel/flowintel/commit/16f618fa36a72c4c5ca3ff0abf7dd67455318ef1nvd
github.com/flowintel/flowintel/commit/2ba9700a5473223639575050bda607f498add7c6nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000