CVE-2026-111694

MEDIUM 5.3

qKnow through 2.4.3 Missing Authentication via /flyflow Workflow Endpoints

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can POST sequential userId values to /flyflow/userById or call roleAll and deptListByParentDeptId to enumerate user phone numbers, roles, and department structure.

CWE	CWE-306
Vendor	qiantongtech
Product	qknow
Published	Oct 16, 2026

Stay Ahead of the Next One

Get instant alerts for qiantongtech qknow

Be the first to know when new medium vulnerabilities affecting qiantongtech qknow are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

qiantongtech / qKnow

0 ≤ 2.4.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hackmd.io: https://hackmd.io/@hieuPenguinnn/qknow-flyflow-unauth-user-directory-disclosure github.com: https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-framework/qknow-security/src/main/java/tech/qiantong/qknow/security/config/SecurityConfig.java#L133 github.com: https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-module-system/qknow-module-system-biz/src/main/java/tech/qiantong/qknow/module/system/controller/admin/flyflow/FlyFlowController.java#L77-L99 github.com: https://github.com/qiantongtech/qKnow vulncheck.com: https://www.vulncheck.com/advisories/qknow-through-2.4.3-missing-authentication-via-flyflow-workflow-endpoints

Credits

hieuPenguinnn