Search for packages
| purl | pkg:npm/flowise@1.3.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-jv9m-vf54-chjj
Aliases: CVE-2025-61913 |
Flowise is vulnerable to arbitrary file write through its WriteFileTool ### Summary The WriteFileTool in Flowise does not restrict the … |
Vulnerable Vulnerable |
|
GHSA-j44m-5v8f-gc9c
|
Flowise is vulnerable to arbitrary file exposure through its ReadFileTool ### Summary The ReadFileTool in Flowise does not restrict file … |
Vulnerable |
|
GHSA-964p-j4gg-mhwc
Aliases: CVE-2025-50538 |
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel ### Summary A stored … |
Vulnerable |
|
GHSA-7rgr-72hp-9wp3
|
Duplicate Advisory: Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel ### Duplicate … |
Vulnerable |
|
GHSA-7r4h-vmj9-wg42
Aliases: CVE-2025-29192 |
Flowise Stored XSS vulnerability through logs in chatbot ### Description In the chat log, tags like input and form are … |
Vulnerable |
|
GHSA-4fr9-3x69-36wv
|
Flowise vulnerable to XSS ### Summary A XSS(cross-site scripting) vulnerability is caused by insufficient filtering of input by web applications. … |
Vulnerable |
|
GHSA-wq95-wr7m-26h4
|
Duplicate Advisory: Flowise Stored XSS vulnerability through logs in chatbot ### Duplicate Advisory This advisory has been withdrawn because it … |
Vulnerable |
|
GHSA-2vv2-3x8x-4gv7
Aliases: CVE-2025-8943 |
Flowise OS command remote code execution The Custom MCPs feature is designed to execute OS commands, for instance, using tools … | There are no reported fixed by versions. |
|
GHSA-q4xx-mc3q-23x8
|
Duplicate Advisory: Flowise vulnerable to RCE via Dynamic function constructor injection ### Duplicate Advisory This advisory has been withdrawn because … | There are no reported fixed by versions. |
|
GHSA-8vvx-qvq9-5948
|
Flowise allows arbitrary file write to RCE ### Summary An attacker could write files with arbitrary content to the filesystem … | There are no reported fixed by versions. |
|
GHSA-h42x-xx2q-6v6g
|
Flowise Pre-auth Arbitrary File Upload ## Summary An unauthorized attacker can leverage the whitelisted route `/api/v1/attachments` to upload arbitrary files … | There are no reported fixed by versions. |
|
GHSA-69jq-qr7w-j7qh
Aliases: CVE-2025-26319 |
FlowiseAI Flowise arbitrary file upload vulnerability FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments. | There are no reported fixed by versions. |
|
GHSA-wgpv-6j63-x5ph
Aliases: CVE-2025-58434 |
Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover ### Summary The `forgot-password` … |
Vulnerable |
|
GHSA-6wp6-22x5-rr3w
Aliases: CVE-2024-31621 |
Flowise vulnerable to code injection via api/v1 An issue in FlowiseAI Inc Flowise prior to v1.8.1 allows a remote attacker … |
Vulnerable |
|
GHSA-2q4w-x8h2-2fvh
Aliases: CVE-2024-8181 |
Flowise Authentication Bypass vulnerability An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker … | There are no reported fixed by versions. |
|
GHSA-wxm4-9f8p-gggv
Aliases: CVE-2024-37146 |
Flowise Cross-site Scripting in/api/v1/credentials/id Flowise is a drag & drop user interface to build a customized large language model flow. … | There are no reported fixed by versions. |
|
GHSA-48x4-mx8f-gr4h
Aliases: CVE-2024-8182 |
Flowise Unauthenticated Denial of Service (DoS) vulnerability An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading … | There are no reported fixed by versions. |
|
GHSA-66f2-xxgm-f6xp
Aliases: CVE-2024-36421 |
Flowise Cors Misconfiguration in packages/server/src/index.ts Flowise is a drag & drop user interface to build a customized large language model … | There are no reported fixed by versions. |
|
GHSA-h997-3fxj-p5j8
Aliases: CVE-2024-36420 |
Flowise Path Injection at /api/v1/openai-assistants-file Flowise is a drag & drop user interface to build a customized large language model … | There are no reported fixed by versions. |
|
GHSA-fccx-2pwj-hrq7
Aliases: CVE-2024-36423 |
Flowise Cross-site Scripting in /api/v1/public-chatflows/id Flowise is a drag & drop user interface to build a customized large language model … | There are no reported fixed by versions. |
|
GHSA-858c-qxvx-rg9v
Aliases: CVE-2024-37145 |
Flowise Cross-site Scripting in /api/v1/chatflows-streaming/id Flowise is a drag & drop user interface to build a customized large language model … | There are no reported fixed by versions. |
|
GHSA-2jch-qc96-9f5g
Aliases: CVE-2024-36422 |
Flowise Cross-site Scripting in api/v1/chatflows/id Flowise is a drag & drop user interface to build a customized large language model … | There are no reported fixed by versions. |
|
GHSA-m5p9-xvxj-64c8
Aliases: CVE-2024-9148 |
Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due … |
Vulnerable |
|
GHSA-6f7g-v4pp-r667
Aliases: CVE-2026-41273 |
Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise ### Summary Flowise contains an authentication bypass vulnerability … |
Vulnerable |
|
GHSA-3prp-9gf7-4rxx
Aliases: CVE-2026-41277 |
Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) ### Summary A Mass Assignment vulnerability in … |
Vulnerable |
|
GHSA-3hjv-c53m-58jj
Aliases: CVE-2026-41264 |
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability ## Abstract Trend Micro's Zero Day Initiative has identified a vulnerability … |
Vulnerable |
|
GHSA-v38x-c887-992f
Aliases: CVE-2026-41265 |
Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability ZDI-CAN-29412: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability Trend Micro's … |
Vulnerable |
|
GHSA-rh7v-6w34-w2rr
Aliases: CVE-2026-41269 |
Flowise: File Upload Validation Bypass in createAttachment ### Summary In FlowiseAI, the Chatflow configuration file upload settings can be modified … |
Vulnerable |
|
GHSA-w6v6-49gh-mc9w
|
Flowise: Path Traversal in Vector Store basePath ## Summary The Faiss and SimpleStore (LlamaIndex) vector store implementations accept a `basePath` … |
Vulnerable |
|
GHSA-f6hc-c5jr-878p
Aliases: CVE-2026-41276 |
Flowise: resetPassword Authentication Bypass Vulnerability ZDI-CAN-28762: Flowise AccountService resetPassword Authentication Bypass Vulnerability -- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative … |
Vulnerable |
|
GHSA-28g4-38q8-3cwc
Aliases: CVE-2026-41274 |
Flowise: Cypher Injection in GraphCypherQAChain ## Summary The GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline … |
Vulnerable |
|
GHSA-c9gw-hvqq-f33r
Aliases: CVE-2026-40933 |
Flowise: Authenticated RCE Via MCP Adapters ### Summary Due to unsafe serialization of stdio commands in the MCP adapter, an … |
Vulnerable |
|
GHSA-5fw2-mwhh-9947
Aliases: CVE-2026-41279 |
Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials ### Summary The text-to-speech … |
Vulnerable |
|
GHSA-w47f-j8rh-wx87
Aliases: CVE-2026-41278 |
Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs ### Summary The `GET /api/v1/public-chatflows/:id` … |
Vulnerable |
|
GHSA-cc4f-hjpj-g9p8
|
Flowise: Weak Default JWT Secrets **Detection Method:** Kolega.dev Deep Code Scan | Attribute | Value | |---|---| | Severity | … |
Vulnerable |
|
GHSA-4jpm-cgx2-8h37
Aliases: CVE-2026-41266 |
Flowise: Sensitive Data Leak in public-chatbotConfig ### Summary `/api/v1/public-chatbotConfig/:id `ep exposes sensitive data including API keys, HTTP authorization headers and … |
Vulnerable |
|
GHSA-x5w6-38gp-mrqh
Aliases: CVE-2026-41275 |
Flowise: Password Reset Link Sent Over Unsecured HTTP **Summary:** The password reset functionality on [cloud.flowiseai.com](http://cloud.flowiseai.com/) sends a reset password link … |
Vulnerable |
|
GHSA-qqvm-66q4-vf5c
Aliases: CVE-2026-43995 |
Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) ### Summary Flowise introduced SSRF protections through … |
Vulnerable |
|
GHSA-9wc7-mj3f-74xv
Aliases: CVE-2026-41137 |
Flowise: Code Injection in CSVAgent leads to Authenticated RCE ### Summary The CSVAgent allows providing a custom Pandas CSV read … |
Vulnerable |
|
GHSA-6fw7-3q8r-m5vj
Aliases: CVE-2026-42861 |
FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-8f47-4rh3-x44m
Aliases: CVE-2026-8026 |
Flowise: Bcrypt Password Hash Exposure A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the … | There are no reported fixed by versions. |
|
GHSA-7g73-99r4-m4mj
Aliases: CVE-2026-46443 |
FlowiseAI Vulnerable to Credential Data Leak **Severity**: HIGH (CVSS ~7.5) **Type**: CWE-200 (Exposure of Sensitive Information) **File**: `packages/server/src/services/credentials/index.ts:62-71` **Description**: When … |
Vulnerable |
|
GHSA-hp26-q66v-q2w7
Aliases: CVE-2026-46441 |
FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-59fh-9f3p-7m39
|
Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification ### Summary … |
Vulnerable |
|
GHSA-hmg2-jjjx-jcp2
Aliases: CVE-2026-46444 |
FlowiseAI: Vector Store No Permission Checks ### FINDING 4: OpenAI Assistants Vector Store - No Auth on CRUD Operations **Severity**: … |
Vulnerable |
|
GHSA-x5v6-pj28-cwwm
Aliases: CVE-2026-42862 |
FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-5wxp-qjgq-fx6m
Aliases: CVE-2026-42863 |
FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-m837-xvxr-vqwg
|
Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage ### Summary The TTS generation endpoint … |
Vulnerable |
|
GHSA-wxrr-jp8m-qq7f
Aliases: CVE-2026-46480 |
FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable |
|
GHSA-9rvc-vf7m-pgm2
Aliases: CVE-2026-46442 |
FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape ### Summary `POST /api/v1/node-custom-function` lacks route-level authorization, allowing any … |
Vulnerable |
|
GHSA-728h-4mwj-f2p4
Aliases: CVE-2026-46476 |
FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable |
|
GHSA-78pr-c5x5-jggc
Aliases: CVE-2026-46475 |
FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable |
|
GHSA-m99r-2hxc-cp3q
|
Flowise has an MCP Security Bypass that Enables RCE ## Summary There are three bypass methods for the security limitations … |
Vulnerable |
|
GHSA-j8g8-j7fc-43v6
Aliases: CVE-2026-30821 |
Flowise has Arbitrary File Upload via MIME Spoofing ### Vulnerability **Description** --- **Vulnerability Overview** - The `/api/v1/attachments/:chatflowId/:chatId` endpoint is listed … |
Vulnerable |
|
GHSA-5f53-522j-j454
Aliases: CVE-2026-30824 |
Flowise Missing Authentication on NVIDIA NIM Endpoints # Missing Authentication on NVIDIA NIM Endpoints ## Summary The NVIDIA NIM router … |
Vulnerable |
|
GHSA-jc5m-wrp2-qq38
|
Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password Endpoint ## Summary The `/api/v1/account/forgot-password` endpoint returns the full user object … |
Vulnerable |
|
GHSA-wvhq-wp8g-c7vq
Aliases: CVE-2026-30820 |
Flowise has Authorization Bypass via Spoofed x-request-from Header ### Summary Flowise trusts any HTTP client that sets the header `x-request-from: … |
Vulnerable |
|
GHSA-9c4c-g95m-c8cp
Aliases: CVE-2025-71332 |
FlowiseDB vulnerable to SQL Injection by authenticated users ### Summary import functions are vulnerable. * [importChatflows](https://github.com/FlowiseAI/Flowise/blob/main/packages/server/src/services/chatflows/index.ts#L219) * [importTools](https://github.com/FlowiseAI/Flowise/blob/main/packages/server/src/services/tools/index.ts#L85) * [importVariables](https://github.com/FlowiseAI/Flowise/blob/main/packages/server/src/services/variables/index.ts) … | There are no reported fixed by versions. |
|
GHSA-x7rp-qj2h-ghgw
|
Flowise Fails to Invalidate Existing Sessions After Password Changes ### Summary Failure to Invalidate Existing Sessions After Password Change (Persistent … |
Vulnerable Vulnerable |
|
GHSA-hmgh-466j-fx4c
Aliases: CVE-2025-55346 |
Flowise vulnerable to RCE via Dynamic function constructor injection ### Summary User-controlled input flows to an unsafe implementaion of a … | There are no reported fixed by versions. |
|
GHSA-cvrr-qhgw-2mm6
Aliases: CVE-2026-41268 |
Flowise: Parameter Override Bypass Remote Command Execution ### Summary Flowise is vulnerable to a critical unauthenticated remote command execution (RCE) … |
Vulnerable Vulnerable |
|
GHSA-2qqc-p94c-hxwh
|
Flowise: Weak Default Express Session Secret **Detection Method:** Kolega.dev Deep Code Scan | Attribute | Value | |---|---| | Location … |
Vulnerable Vulnerable |
|
GHSA-6r77-hqx7-7vw8
Aliases: CVE-2026-41271 |
Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains ### Summary A Server-Side Request Forgery (SSRF) vulnerability exists in FlowiseAI's … |
Vulnerable Vulnerable |
|
GHSA-48m6-ch88-55mj
Aliases: CVE-2026-41267 |
Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association ### Summary An improper mass assignment (JSON injection) vulnerability … |
Vulnerable Vulnerable |
|
GHSA-6pcv-j4jx-m4vx
Aliases: CVE-2026-56270 |
Flowise: Unauthenticated Information Disclosure of OAuth Secrets (Cleartext) via GET Request ### Summary I have discovered a critical Missing Authentication … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-f228-chmx-v6j6
Aliases: CVE-2026-41138 |
Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`. ## Description ### Summary … |
Vulnerable Vulnerable |
|
GHSA-2x8m-83vc-6wv4
Aliases: CVE-2026-41272 |
Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) ### Summary The core security wrappers (secureAxiosRequest and secureFetch) intended to prevent … |
Vulnerable Vulnerable |
|
GHSA-xhmj-rg95-44hv
Aliases: CVE-2026-41270 |
Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox ### Summary A Server-Side Request Forgery (SSRF) … |
Vulnerable Vulnerable |
|
GHSA-php6-83fg-gw3g
Aliases: CVE-2026-46440 |
FlowiseAI Exposes Basic Auth Credentials via API **Detection Method:** Kolega.dev Deep Code Scan | Attribute | Value | |---|---| | … |
Vulnerable Vulnerable |
|
GHSA-fvcw-9w9r-pxc7
Aliases: CVE-2026-31829 |
Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access **Description:** Flowise exposes an HTTP … |
Vulnerable Vulnerable |
|
GHSA-cwc3-p92j-g7qm
Aliases: CVE-2026-30823 |
Flowise has IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration ### Summary The Flowise platform has … |
Vulnerable Vulnerable |
|
GHSA-mq4r-h2gh-qv7x
Aliases: CVE-2026-30822 |
Flowise Allows Mass Assignment in `/api/v1/leads` Endpoint ## Summary **A Mass Assignment vulnerability in the `/api/v1/leads` endpoint allows any unauthenticated … |
Vulnerable Vulnerable |
|
GHSA-5h9v-837x-m97r
Aliases: CVE-2026-46477 |
FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable Vulnerable |
|
GHSA-7j65-65cr-6644
Aliases: CVE-2026-46478 |
FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable Vulnerable |
|
GHSA-mq53-pc65-wjc4
Aliases: CVE-2026-46479 |
FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable Vulnerable |
|
GHSA-m7mq-85xj-9x33
Aliases: CVE-2026-56269 |
Flowise: Weak Default Token Hash Secret **Detection Method:** Kolega.dev Deep Code Scan | Attribute | Value | |---|---| | Location … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-c2c9-mfw7-p8hw
Aliases: CVE-2026-56268 |
Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows ## Summary The `/api/v1/chatflows/apikey/:apikey` endpoint (whitelisted, accessible with API … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-x2g5-fvc2-gqvp
Aliases: CVE-2026-56272 |
Flowise has Insufficient Password Salt Rounds ### Description The default bcrypt salt rounds is set to 5, which is below … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2025-61913
Aliases: GHSA-jv9m-vf54-chjj |
Flowise is vulnerable to arbitrary file write through its WriteFileTool The WriteFileTool in Flowise does not restrict the file path … |
Vulnerable Vulnerable |
|
GHSA-4j8x-x6v7-w9rq
Aliases: CVE-2026-69264 |
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation ### Summary Flowise's `CSVAgent` … |
Vulnerable |
|
GHSA-p5w8-m249-4r4v
Aliases: CVE-2026-69262 |
Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type # summary: … |
Vulnerable |
|
GHSA-6vh2-wg4h-4vwj
Aliases: CVE-2026-69258 |
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API #### Summary The `POST /api/v1/prediction/:id` … |
Vulnerable |
|
GHSA-c6xh-wv4j-ppv5
Aliases: CVE-2026-69257 |
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses ## Summary Flowise's HTTP security module (`httpSecurity.ts`) fails to normalize IPv4-mapped IPv6 … |
Vulnerable |
|
GHSA-vmv7-4m6c-3cg5
Aliases: CVE-2026-69255 |
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified ## UPDATE 2026-05-20: Full RCE as … |
Vulnerable |
|
GHSA-x6vm-w76m-8j7g
Aliases: CVE-2026-69256 |
Flowise: Remote Code Execution Vulnerability in CSVAgent ### Summary The CSVAgent node was observed to allow users to write Python … |
Vulnerable |
|
GHSA-52fh-8v99-63c2
Aliases: CVE-2026-70470 |
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE ### Summary The validatePythonCodeForDataFrame blacklist in packages/components/src/pythonCodeValidator.ts can be bypassed with … |
Vulnerable |
|
GHSA-fr6g-7cq8-fg82
Aliases: CVE-2026-70473 |
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history ### Summary The **GET `/api/v1/upsert-history`** endpoint returns the … |
Vulnerable |
|
GHSA-wg86-r78f-74mp
Aliases: CVE-2026-69253 |
Flowise Sandbox Escape to RCE ============================================================================= Security Advisory elttam Topic: Flowise JavaScript Sandbox Escape Module: FlowiseAI/Flowise, FlowiseAI/nodevm Disclosed: 11-Apr-2026 Credits: … |
Vulnerable |
|
GHSA-qgvm-j2hm-6m38
Aliases: CVE-2026-70478 |
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service ### Summary The … |
Vulnerable |
|
GHSA-chm3-vqcf-52rx
Aliases: CVE-2026-70472 |
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store # Summary These endpoints accept a client-controlled `credential` parameter. The server loads credentials by … |
Vulnerable |
|
GHSA-wp74-f5hh-5f3r
Aliases: CVE-2026-69252 |
Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization … |
Vulnerable |
|
GHSA-g32j-mmxr-gfq5
Aliases: CVE-2026-69251 |
============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: `FlowiseAI/Flowise 3.1.2` … |
Vulnerable |
|
GHSA-x3hf-7cj6-3r4m
Aliases: CVE-2026-69259 |
============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: … |
Vulnerable |
|
GHSA-rwrp-9823-p2xq
|
Flowise: Incomplete Credential Redaction Exposes Secrets via API ## Summary The `GET /api/v1/credentials/:id` endpoint decrypts stored credential data and returns … |
Vulnerable |
|
GHSA-8gj2-2cvc-6xx7
|
Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials ## Summary The `/api/v1/text-to-speech/generate` endpoint … |
Not vulnerable |
|
GHSA-fm2f-4339-4p2f
Aliases: CVE-2026-70475 |
Flowise: Missing Authorization on Execution Update Endpoint # Flowise Security Audit Report **Date**: 2026-03-17 **Researcher**: Dimpal Jadhav (jadhavdimpy@gmail.com) **GitHub**: https://github.com/Dimpyj1604 … |
Vulnerable |
|
GHSA-xc48-889x-5qmw
Aliases: CVE-2026-69263 |
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) ## Summary The mitigation shipped for CVE-2025-8943 blocks … |
Vulnerable |
|
GHSA-gmmw-qg98-6j6p
Aliases: CVE-2026-70476 |
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation ### Summary Several organization billing endpoints accept attacker-controlled … |
Vulnerable |
|
GHSA-wch5-xp77-fxg4
Aliases: CVE-2026-70474 |
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak ## Summary Three OAuth2 credential endpoints look up credentials by `id` alone with no … |
Vulnerable |
|
GHSA-5xvg-pmgg-3mxr
Aliases: CVE-2026-70477 |
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability -- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a … |
Vulnerable |
|
GHSA-8r8h-6vcc-xhrv
Aliases: CVE-2026-70471 |
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure ## Finding — Unauthorized Workspace Variables disclosure via $vars injection (bypasses … |
Vulnerable |
|
GHSA-88pr-878c-24wf
|
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys ## Summary Flowise on … |
Vulnerable |
|
GHSA-2364-jh4q-m9vm
|
Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint ### Summary An Insecure Direct Object Reference (IDOR) vulnerability exists at … |
Vulnerable |
|
GHSA-r745-8hwv-h473
Aliases: CVE-2026-69250 |
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration ### Summary The OAuth2 token refresh endpoint (`POST /api/v1/oauth2-credential/refresh/:credentialId`) is … |
Vulnerable |
|
GHSA-3769-jgqc-cxm7
Aliases: CVE-2026-69254 |
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override ### Summary A sandbox escape vulnerability in `executeJavaScriptCode()` allows any … |
Vulnerable |
|
GHSA-5cph-wvm9-45gj
Aliases: CVE-2024-58351 |
Flowise OverrideConfig security vulnerability ### Impact Flowise allows developers to inject configuration into the Chainflow during execution through the `overrideConfig` … |
Vulnerable Vulnerable |
|
GHSA-9hrv-gvrv-6gf2
Aliases: CVE-2026-56275 |
Flowise Execute Flow function has an SSRF vulnerability ### Summary The attacker provides an intranet address through the base url … |
Vulnerable Vulnerable |
|
GHSA-5w6g-rc45-wvv9
|
Duplicate Advisory: Flowise OverrideConfig security vulnerability ### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of … |
Vulnerable |
|
GHSA-w4hm-rrxg-pxcf
|
Duplicate Advisory: Flowise Execute Flow function has an SSRF vulnerability ### Duplicate Advisory This advisory has been withdrawn because it … |
Vulnerable |
|
GHSA-w7x8-q2gp-5cgg
Aliases: CVE-2026-73487 |
Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass ## Summary Flowise <= 3.1.2 CSV Agent … |
Vulnerable |
|
GHSA-9gvv-qjj3-2p6g
Aliases: CVE-2026-73483 |
Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium Flowise (packages flowise and … |
Vulnerable |
|
GHSA-6j9g-8fxc-25hq
|
Duplicate Advisory: Flowise contains an unauthenticated sandbox escape # Duplicate Advisory This advisory has been withdrawn because it is a … |
Vulnerable |