A vulnerability was found in lwj flow up to a3d2fe8133db9d3b50fda4f66f68634640344641. It has been classified as critical. This affects the function
uploadFile of the file flow-masterflow-front-restsrcmainjavacomdragonflowwebresourceflowFormResource.java of the component SVG File Handler. The manipulation of the argument File leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2026-1126. The attack is possible to be carried out remotely. Moreover, an exploit is present.
This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.
The project was informed of the problem early through an issue report but has not responded yet.
