What is GHSA-7fmm-xcgh-ggrf?

GHSA-7fmm-xcgh-ggrf is a security advisory published by GitHub Security Advisories with Medium severity. An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the...

Which CVE IDs does GHSA-7fmm-xcgh-ggrf cover?

GHSA-7fmm-xcgh-ggrf covers the following CVE IDs: CVE-2026-52097. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7fmm-xcgh-ggrf?

GHSA-7fmm-xcgh-ggrf has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-7fmm-xcgh-ggrfMediumCVSS 6.8

An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the...

Vendor

GitHub Security Advisories

Published

September 10, 2026

Last Modified

September 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-52097 →

📋 Description

An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, _afLaunchLocalUri (url_launcher.dart), OpenFilex.open, localPathRegex (common_patterns.dart) components

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-52097
https://github.com/AppFlowy-IO/AppFlowy
https://github.com/AppFlowy-IO/AppFlowy/blob/main/frontend/appflowy_flutter/lib/core/helpers/common_patterns.dart
https://github.com/AppFlowy-IO/AppFlowy/blob/main/frontend/appflowy_flutter/lib/core/helpers/url_launcher.dart
https://github.com/advisories/GHSA-7fmm-xcgh-ggrf