Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export.
HIGH
Vulnerability intelligence
CVE-2026-81659
CVSS 4.07.1
SeverityHigh
Known exploitedNo
NVD references:
Primary source: NIST National Vulnerability Database