CVE-2026-110185: The Bit Flows WordPress plugin local file inclusion through webhook image field

Summary

The Bit Flows AI Agent Automation plugin for WordPress, in all versions up to and including 1.31.0, has a Local File Inclusion flaw in the 'image' parameter, which maps to any body field referenced by the ImageHelper node's mix tag. Unauthenticated attackers can include and execute arbitrary .php files on the server, enabling code execution, access control bypass, or sensitive data access. Exploitation requires an administrator to have built a webhook-triggered flow piping a body field into an ImageHelper imageToBase64 node, with the webhook left in its default configuration (no bearer secret, no IP allowlist).

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• AI agents

Related items

• InfoAnthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux ExploitsSimilar attack · The Hacker News
• HighCVE-2026-118378: Tabularis SQLite driver SQL injection through MCP describe_table toolSimilar attack · NVD/CVE Database
• HighGHSA-m65p-9j7q-6w33: MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceSimilar attack · GitHub Advisory Database
• CriticalGHSA-26p8-2jq9-3vq9: MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modulesSimilar attack · GitHub Advisory Database
• MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSimilar attack · GitHub Advisory Database