Search for packages
| purl | pkg:npm/flowise@3.1.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-6fw7-3q8r-m5vj
Aliases: CVE-2026-42861 |
FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-7g73-99r4-m4mj
Aliases: CVE-2026-46443 |
FlowiseAI Vulnerable to Credential Data Leak **Severity**: HIGH (CVSS ~7.5) **Type**: CWE-200 (Exposure of Sensitive Information) **File**: `packages/server/src/services/credentials/index.ts:62-71` **Description**: When … |
Vulnerable |
|
GHSA-hp26-q66v-q2w7
Aliases: CVE-2026-46441 |
FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-59fh-9f3p-7m39
|
Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification ### Summary … |
Vulnerable |
|
GHSA-hmg2-jjjx-jcp2
Aliases: CVE-2026-46444 |
FlowiseAI: Vector Store No Permission Checks ### FINDING 4: OpenAI Assistants Vector Store - No Auth on CRUD Operations **Severity**: … |
Vulnerable |
|
GHSA-x5v6-pj28-cwwm
Aliases: CVE-2026-42862 |
FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-5wxp-qjgq-fx6m
Aliases: CVE-2026-42863 |
FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment ### Summary A Mass Assignment vulnerability exists … |
Vulnerable |
|
GHSA-m837-xvxr-vqwg
|
Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage ### Summary The TTS generation endpoint … |
Vulnerable |
|
GHSA-wxrr-jp8m-qq7f
Aliases: CVE-2026-46480 |
FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable |
|
GHSA-9rvc-vf7m-pgm2
Aliases: CVE-2026-46442 |
FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape ### Summary `POST /api/v1/node-custom-function` lacks route-level authorization, allowing any … |
Vulnerable |
|
GHSA-728h-4mwj-f2p4
Aliases: CVE-2026-46476 |
FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable |
|
GHSA-78pr-c5x5-jggc
Aliases: CVE-2026-46475 |
FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable |
|
GHSA-m99r-2hxc-cp3q
|
Flowise has an MCP Security Bypass that Enables RCE ## Summary There are three bypass methods for the security limitations … |
Vulnerable |
|
GHSA-php6-83fg-gw3g
Aliases: CVE-2026-46440 |
FlowiseAI Exposes Basic Auth Credentials via API **Detection Method:** Kolega.dev Deep Code Scan | Attribute | Value | |---|---| | … |
Vulnerable Vulnerable |
|
GHSA-5h9v-837x-m97r
Aliases: CVE-2026-46477 |
FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable Vulnerable |
|
GHSA-7j65-65cr-6644
Aliases: CVE-2026-46478 |
FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable Vulnerable |
|
GHSA-mq53-pc65-wjc4
Aliases: CVE-2026-46479 |
FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover ## Summary **Type:** Mass assignment via `Object.assign(entity, body)` -> client-controlled `workspaceId` (and … |
Vulnerable Vulnerable |
|
GHSA-c2c9-mfw7-p8hw
Aliases: CVE-2026-56268 |
Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows ## Summary The `/api/v1/chatflows/apikey/:apikey` endpoint (whitelisted, accessible with API … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-4j8x-x6v7-w9rq
Aliases: CVE-2026-69264 |
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation ### Summary Flowise's `CSVAgent` … |
Vulnerable |
|
GHSA-p5w8-m249-4r4v
Aliases: CVE-2026-69262 |
Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type # summary: … |
Vulnerable |
|
GHSA-6vh2-wg4h-4vwj
Aliases: CVE-2026-69258 |
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API #### Summary The `POST /api/v1/prediction/:id` … |
Vulnerable |
|
GHSA-c6xh-wv4j-ppv5
Aliases: CVE-2026-69257 |
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses ## Summary Flowise's HTTP security module (`httpSecurity.ts`) fails to normalize IPv4-mapped IPv6 … |
Vulnerable |
|
GHSA-vmv7-4m6c-3cg5
Aliases: CVE-2026-69255 |
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified ## UPDATE 2026-05-20: Full RCE as … |
Vulnerable |
|
GHSA-x6vm-w76m-8j7g
Aliases: CVE-2026-69256 |
Flowise: Remote Code Execution Vulnerability in CSVAgent ### Summary The CSVAgent node was observed to allow users to write Python … |
Vulnerable |
|
GHSA-52fh-8v99-63c2
Aliases: CVE-2026-70470 |
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE ### Summary The validatePythonCodeForDataFrame blacklist in packages/components/src/pythonCodeValidator.ts can be bypassed with … |
Vulnerable |
|
GHSA-fr6g-7cq8-fg82
Aliases: CVE-2026-70473 |
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history ### Summary The **GET `/api/v1/upsert-history`** endpoint returns the … |
Vulnerable |
|
GHSA-wg86-r78f-74mp
Aliases: CVE-2026-69253 |
Flowise Sandbox Escape to RCE ============================================================================= Security Advisory elttam Topic: Flowise JavaScript Sandbox Escape Module: FlowiseAI/Flowise, FlowiseAI/nodevm Disclosed: 11-Apr-2026 Credits: … |
Vulnerable |
|
GHSA-qgvm-j2hm-6m38
Aliases: CVE-2026-70478 |
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service ### Summary The … |
Vulnerable |
|
GHSA-chm3-vqcf-52rx
Aliases: CVE-2026-70472 |
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store # Summary These endpoints accept a client-controlled `credential` parameter. The server loads credentials by … |
Vulnerable |
|
GHSA-wp74-f5hh-5f3r
Aliases: CVE-2026-69252 |
Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization … |
Vulnerable |
|
GHSA-g32j-mmxr-gfq5
Aliases: CVE-2026-69251 |
============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: `FlowiseAI/Flowise 3.1.2` … |
Vulnerable |
|
GHSA-x3hf-7cj6-3r4m
Aliases: CVE-2026-69259 |
============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: … |
Vulnerable |
|
GHSA-rwrp-9823-p2xq
|
Flowise: Incomplete Credential Redaction Exposes Secrets via API ## Summary The `GET /api/v1/credentials/:id` endpoint decrypts stored credential data and returns … |
Vulnerable |
|
GHSA-8gj2-2cvc-6xx7
|
Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials ## Summary The `/api/v1/text-to-speech/generate` endpoint … |
Not vulnerable |
|
GHSA-fm2f-4339-4p2f
Aliases: CVE-2026-70475 |
Flowise: Missing Authorization on Execution Update Endpoint # Flowise Security Audit Report **Date**: 2026-03-17 **Researcher**: Dimpal Jadhav (jadhavdimpy@gmail.com) **GitHub**: https://github.com/Dimpyj1604 … |
Vulnerable |
|
GHSA-xc48-889x-5qmw
Aliases: CVE-2026-69263 |
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) ## Summary The mitigation shipped for CVE-2025-8943 blocks … |
Vulnerable |
|
GHSA-gmmw-qg98-6j6p
Aliases: CVE-2026-70476 |
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation ### Summary Several organization billing endpoints accept attacker-controlled … |
Vulnerable |
|
GHSA-wch5-xp77-fxg4
Aliases: CVE-2026-70474 |
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak ## Summary Three OAuth2 credential endpoints look up credentials by `id` alone with no … |
Vulnerable |
|
GHSA-5xvg-pmgg-3mxr
Aliases: CVE-2026-70477 |
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability -- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a … |
Vulnerable |
|
GHSA-8r8h-6vcc-xhrv
Aliases: CVE-2026-70471 |
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure ## Finding — Unauthorized Workspace Variables disclosure via $vars injection (bypasses … |
Vulnerable |
|
GHSA-88pr-878c-24wf
|
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys ## Summary Flowise on … |
Vulnerable |
|
GHSA-2364-jh4q-m9vm
|
Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint ### Summary An Insecure Direct Object Reference (IDOR) vulnerability exists at … |
Vulnerable |
|
GHSA-r745-8hwv-h473
Aliases: CVE-2026-69250 |
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration ### Summary The OAuth2 token refresh endpoint (`POST /api/v1/oauth2-credential/refresh/:credentialId`) is … |
Vulnerable |
|
GHSA-3769-jgqc-cxm7
Aliases: CVE-2026-69254 |
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override ### Summary A sandbox escape vulnerability in `executeJavaScriptCode()` allows any … |
Vulnerable |
|
GHSA-w7x8-q2gp-5cgg
Aliases: CVE-2026-73487 |
Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass ## Summary Flowise <= 3.1.2 CSV Agent … |
Vulnerable |
|
GHSA-9gvv-qjj3-2p6g
Aliases: CVE-2026-73483 |
Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium Flowise (packages flowise and … |
Vulnerable |
|
GHSA-6j9g-8fxc-25hq
|
Duplicate Advisory: Flowise contains an unauthenticated sandbox escape # Duplicate Advisory This advisory has been withdrawn because it is a … |
Vulnerable |