CVE-2025-31408

Summary

CVE-2025-31408 is a vulnerability affecting Zoho Flow, where missing authorization checks allow unauthorized access to certain functionalities. This issue arises due to incorrectly configured access control security levels. Zoho Flow versions from n/a to 2.13.3 are susceptible to this vulnerability, potentially exposing sensitive data or enabling unintended actions. Attackers can exploit this flaw to gain elevated privileges, leading to potential data breaches or system manipulation. Users are advised to update their Zoho Flow installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.