vciy

CVEs we hold for Flowise

Records whose assigning authority named Flowise as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-91938Flowise before 3.1.4 Server-Side Request Forgery via document loadersFlowiseAI Flowise
CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionIdFlowiseAI Flowise
CVE-2026-91936Flowise before 3.1.4 Script Injection via Docker WorkflowsFlowiseAI Flowise
CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model NodesFlowiseAI Flowise
CVE-2026-91934Flowise before 3.1.4 Remote Code Execution via SQL Database ChainFlowiseAI Flowise
CVE-2026-91933Flowise before 3.1.4 Authorization Bypass via openai-realtimeFlowiseAI Flowise
CVE-2026-91932Flowise before 3.1.4 Remote Code Execution via cwd ParameterFlowiseAI Flowise
CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npxFlowiseAI Flowise
CVE-2026-91930Flowise before 3.1.4 Cross-Tenant Organization Admin TakeoverFlowiseAI Flowise
CVE-2026-91929Flowise before 3.1.4 Cross-Tenant Authorization BypassFlowiseAI Flowise
CVE-2026-90580FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgeryFlowiseAI Flowise
CVE-2026-90535Flowise before 3.1.4 Denial of Service via text-to-speech/abortFlowiseAI Flowise
CVE-2026-90534Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-methodFlowiseAI Flowise
CVE-2026-90533Flowise before 3.1.4 Broken Access Control via organizationuserFlowiseAI Flowise
CVE-2026-8028FlowiseAI Flowise Endpoint account.service.ts verify information disclosureFlowiseAI Flowise
CVE-2026-8027FlowiseAI Flowise User Controller authorizationFlowiseAI Flowise
CVE-2026-8026FlowiseAI Flowise API Response account.service.ts login information disclosureFlowiseAI Flowise
CVE-2026-73604Flowise before 3.1.3 Credential Exposure via APIFlowiseAI Flowise
CVE-2026-73603Flowise before 3.1.4 Credential Abuse via Text-to-SpeechFlowiseAI Flowise
CVE-2026-73602Flowise before 3.1.3 Sandbox Escape to RCEFlowiseAI Flowise
CVE-2026-73601Flowise before 3.1.3 Remote Code Execution via Custom MCPFlowiseAI Flowise
CVE-2026-73488Flowise before 3.1.3 IDOR via customer-default-source endpointFlowiseAI Flowise
CVE-2026-73487Flowise before 3.1.3 Prompt Injection RCE via CSV AgentFlowiseAI Flowise
CVE-2026-73486Flowise before 3.1.3 Code Injection via CSV Agent customReadCSVFlowiseAI Flowise
CVE-2026-73485Flowise before 3.1.3 Remote Code Execution via Airtable AgentFlowiseAI Flowise
CVE-2026-73484Flowise before 3.1.3 Sandbox Escape via Pandas MethodsFlowiseAI Flowise
CVE-2026-73483Flowise before 3.1.3 Sandbox Escape via PuppeteerFlowiseAI Flowise
CVE-2026-71962Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/downloadFlowiseAI Flowise
CVE-2026-70636Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh EndpointFlowiseAI Flowise
CVE-2026-70478Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected…FlowiseAI Flowise
CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityFlowiseAI Flowise
CVE-2026-70476Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing ManipulationFlowiseAI Flowise
CVE-2026-70475Flowise: Missing Authorization on Execution Update EndpointFlowiseAI Flowise
CVE-2026-70474Flowise: Cross-Workspace OAuth2 Credential Metadata LeakFlowiseAI Flowise
CVE-2026-70473Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert historyFlowiseAI Flowise
CVE-2026-70472Flowise: Cross-workspace credential IDOR in openai-assistants-vector-storeFlowiseAI Flowise
CVE-2026-70471Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables DisclosureFlowiseAI Flowise
CVE-2026-70470Flowise: Pyodide validator Unicode homoglyph bypass leads to RCEFlowiseAI Flowise
CVE-2026-69264Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validationFlowiseAI Flowise
CVE-2026-69263Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)FlowiseAI Flowise
CVE-2026-69262Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and…FlowiseAI Flowise
CVE-2026-69259Flowise RCE via SQLite Record Manager NodeFlowiseAI Flowise
CVE-2026-69258Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in…FlowiseAI Flowise
CVE-2026-69257Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 AddressesFlowiseAI Flowise
CVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgentFlowiseAI Flowise
CVE-2026-69255Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell VerifiedFlowiseAI Flowise
CVE-2026-69254Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions OverrideFlowiseAI Flowise
CVE-2026-69253Flowise Sandbox Escape to RCEFlowiseAI Flowise
CVE-2026-69252Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across…FlowiseAI Flowise
CVE-2026-69251Flowise RCE via TypeORM DataSourceFlowiseAI flowise-components
CVE-2026-69250Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret ExfiltrationFlowiseAI Flowise
CVE-2026-67622Flowise 3.1.4 IDOR in OpenAI Assistants IntegrationFlowiseAI Flowise
CVE-2026-67621Flowise 3.1.4 Missing Authorization on Document Store Mutation EndpointsFlowiseAI Flowise
CVE-2026-67620Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-ListFlowiseAI Flowise
CVE-2026-58057Flowise - Custom MCP Environment Variable Denylist Bypass via Case SensitivityFlowise
CVE-2026-56278Flowise - Session Hijacking via Weak Default Express Session SecretFlowise
CVE-2026-56277Flowise - Hardcoded CORS Wildcard in TTS EndpointFlowise
CVE-2026-56276Flowise - Mass Assignment in PUT /api/v1/user Allows Password Hash OverrideFlowise
CVE-2026-56275Flowise - Server-Side Request Forgery via Execute Flow Base URLFlowise
CVE-2026-56274Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccessFlowise; Flowise Components
CVE-2026-56273Flowise - Path Traversal in Vector Store basePath ParameterFlowise
CVE-2026-56272Flowise - Insufficient Password Salt Rounds in Bcrypt HashingFlowise
CVE-2026-56271Flowise - Weak Default JWT Secrets in Authentication MiddlewareFlowise
CVE-2026-56270Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod EndpointFlowise
CVE-2026-56269Flowise - Weak Default Token Hash Secret in JWT Token EncryptionFlowise
CVE-2026-56268Flowise - Cross-Workspace Information Disclosure via chatflows/apikey EndpointFlowise
CVE-2026-56267Flowise - PII Disclosure via Unauthenticated Forgot Password EndpointFlowise
CVE-2026-46480Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeoverFlowiseAI Flowise
CVE-2026-46479Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeoverFlowiseAI Flowise
CVE-2026-46478Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeoverFlowiseAI Flowise
CVE-2026-46477Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeoverFlowiseAI Flowise
CVE-2026-46476Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeoverFlowiseAI Flowise
CVE-2026-46475Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeoverFlowiseAI Flowise
CVE-2026-46444Flowise: Vector Store No Permission ChecksFlowiseAI Flowise
CVE-2026-46443Flowise: Credential Data LeakFlowiseAI Flowise
CVE-2026-46442Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox EscapeFlowiseAI Flowise
CVE-2026-46441Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource ReassignmentFlowiseAI Flowise
CVE-2026-46440Flowise: Basic Auth Credentials Exposed via APIFlowiseAI Flowise
CVE-2026-43995Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)FlowiseAI Flowise
CVE-2026-42863Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow ReassignmentFlowiseAI Flowise
CVE-2026-42862Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource ReassignmentFlowiseAI Flowise
CVE-2026-42861Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource ReassignmentFlowiseAI Flowise
CVE-2026-41279Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentialsFlowiseAI Flowise
CVE-2026-41278Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential…FlowiseAI Flowise
CVE-2026-41277Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)FlowiseAI Flowise
CVE-2026-41276Flowise: AccountService resetPassword Authentication Bypass VulnerabilityFlowiseAI Flowise
CVE-2026-41275Flowise: Password Reset Link Sent Over Unsecured HTTPFlowiseAI Flowise
CVE-2026-41274Flowise: Cypher Injection in GraphCypherQAChainFlowiseAI flowise-components
CVE-2026-41273Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public ChatflowFlowiseAI Flowise
CVE-2026-41272Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)FlowiseAI flowise-components
CVE-2026-41271Flowise: APIChain Prompt Injection SSRF in GET/POST API ChainsFlowiseAI flowise-components
CVE-2026-41270Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function SandboxFlowiseAI flowise-components
CVE-2026-41269Flowise: File Upload Validation Bypass in createAttachmentFlowiseAI Flowise
CVE-2026-41268Flowise: Flowise Parameter Override Bypass Remote Command ExecutionFlowiseAI Flowise
CVE-2026-41267Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization AssociationFlowiseAI Flowise
CVE-2026-41266Flowise: Sensitive Data Leak in public-chatbotConfigFlowiseAI Flowise
CVE-2026-41265Flowise: Airtable_Agent Code Injection Remote Code Execution VulnerabilityFlowiseAI Flowise
CVE-2026-41264Flowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityFlowiseAI Flowise
CVE-2026-41138Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.FlowiseAI Flowise
CVE-2026-41137Flowise: Code Injection in CSVAgent leads to Authenticated RCEFlowiseAI flowise-components
CVE-2026-40933Flowise: Authenticated RCE Via MCP AdaptersFlowiseAI flowise-components
CVE-2026-31829Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network AccessFlowiseAI Flowise
CVE-2026-30824Flowise: Missing Authentication on NVIDIA NIM EndpointsFlowiseAI Flowise
CVE-2026-30823Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO ConfigurationFlowiseAI Flowise
CVE-2026-30822Flowise: Mass Assignment in `/api/v1/leads` EndpointFlowiseAI Flowise
CVE-2026-30821Flowise: Arbitrary File Upload via MIME SpoofingFlowiseAI Flowise
CVE-2026-30820Flowise Authorization Bypass via Spoofed x-request-from HeaderFlowiseAI Flowise
CVE-2026-12821FlowiseAI Flowise S3 Document Loader S3.ts path traversalFlowiseAI Flowise
CVE-2025-71338Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store APIFlowise
CVE-2025-71337Flowise - Unverified Email Change via Account Profile EndpointFlowise
CVE-2025-71336Flowise - Unsandboxed Remote Code Execution via Custom MCPFlowise
CVE-2025-71335Flowise - Session Invalidation Failure After Password ChangeFlowise
CVE-2025-71334Flowise - Arbitrary File Access via Missing Chat Flow ID ValidationFlowise
CVE-2025-71333Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments EndpointFlowise
CVE-2025-71332Flowise - SQL Injection in importChatflows API via chatflow.id ParameterFlowise
CVE-2025-71331Flowise - Cross-Site Scripting in Chat Messages and Agent WorkflowsFlowise
CVE-2025-71328Flowise - Unverified Password Change via Account SettingsFlowise
CVE-2025-71327Flowise - Authentication Bypass via Unprotected Registration EndpointFlowise
CVE-2025-71324Flowise - Arbitrary File Read via chatId ParameterFlowise
CVE-2025-61913Flowise is vulnerable to arbitrary file read, arbitrary file writeFlowiseAI Flowise
CVE-2025-61687FlowiseAI/Flosise has File Upload vulnerabilityFlowiseAI Flowise
CVE-2025-59528Flowise has Remote Code Execution vulnerabilityFlowiseAI Flowise
CVE-2025-59527FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerabilityFlowiseAI Flowise
CVE-2025-59434Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript FunctionFlowiseAI Flowise
CVE-2025-58434Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account TakeoverFlowiseAI Flowise
CVE-2025-50538no title heldFlowiseAI Flowise
CVE-2025-34267Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright PackagesFlowiseAI Flowise
CVE-2025-29192no title heldFlowiseAI Flowise
CVE-2024-9148Flowise Stored Cross-Site ScriptingFlowiseAI FlowiseChatEmbed
CVE-2024-8182Flowise Denial of ServiceFlowiseAI Flowise
CVE-2024-8181Flowise Authentication BypassFlowiseAI Flowise
CVE-2024-58351Flowise - Remote Code Execution via overrideConfig ParameterFlowise
CVE-2024-37146GHSL-2023-248: Flowise xss in /api/v1/credentials/idFlowiseAI Flowise
CVE-2024-37145GHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/idFlowiseAI Flowise
CVE-2024-36423GHSL-2023-246: Flowise xss in /api/v1/public-chatflows/idFlowiseAI Flowise
CVE-2024-36422GHSL-2023-245: Flowise xss in api/v1/chatflows/idFlowiseAI Flowise
CVE-2024-36421GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.tsFlowiseAI Flowise
CVE-2024-36420GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-fileFlowiseAI Flowise

138 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.