CVE-2026-109442: Unauthenticated RCE in piflow

CVE-2026-109442 affects piflow versions 2.0.0 and 2.0.1 and describes a remote code execution (RCE) vulnerability in the POST /chat and POST /chat/stream endpoints of the DeepAgents chat agent component. These endpoints lack any authentication mechanism, allowing any attacker to send requests and instruct the agent to invoke the exec_shell tool, which executes arbitrary commands via subprocess.run. The absence of human approval or command allow-listing makes this exposure critical.

The vulnerability is rated critical with CVSS 9.8 and was published in the National Vulnerability Database on October 20, 2026. The concrete risk is underscored by social signals: a post on X today (November 1) mentions it among six CVSS 9.8-rated CVEs affecting self-hosted agents such as Letta, DB-GPT, and piflow—all sharing unauthenticated endpoints in production environments. No confirmed public exploit is yet recorded, but social media discussion emerged within the last 24 hours.

Organizations running piflow must immediately upgrade to a version later than 2.0.1 when available. Until then, strict network controls on /chat and /chat/stream endpoints (authentication, API gateway, WAF) are mandatory. Audit access logs and secret managers for unauthorized access to LLM keys and database credentials. Fully disable or isolate public access to the service until an official patch is released.