FlowiseAI

Records151All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical47CVSS 9.0–10.0

CVSS high77CVSS 7.0–8.9

Exploited now

FlowiseAI records in CISA KEV

No FlowiseAI vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flowise 128 records CRITICAL Embed 1 record HIGH

Records

128 records in Flowise · all components

TI-2025-37059 CVE-2025-59528 · GHSA-3gcm-f6qx-ff7p

Flowise has Remote Code Execution vulnerability

CRITICAL 91

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.86975 Published 2025-09-22 Fixed in 3.0.6 CWE-94

TI-2025-36193 CVE-2025-58434 · GHSA-wgpv-6j63-x5ph

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

CRITICAL 90

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82585 Published 2025-09-12 Fixed in 3.0.6 CWE-306

TI-2025-08190 CVE-2025-8943 · GHSA-2vv2-3x8x-4gv7

Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers

CRITICAL 88

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.75296 Published 2025-08-14 Fixed in 3.0.1 CWE-306

TI-2026-51595 CVE-2026-73483 · GHSA-6j9g-8fxc-25hq · GHSA-9gvv-qjj3-2p6g

Flowise before 3.1.3 Sandbox Escape via Puppeteer

HIGH 82

Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00621 Published 2026-08-13 Fixed in 3.1.3 CWE-78

TI-2026-49250 CVE-2026-70477 · GHSA-5xvg-pmgg-3mxr

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

HIGH 82

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00814 Published 2026-08-04 Fixed in 3.1.2, 3.1.3 CWE-94

TI-2025-43459 CVE-2025-71338 · GHSA-c3hj-m5hq-59xw

Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API

HIGH 82

Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write files outside the storage directory.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01157 Published 2026-06-25 No fix listed CWE-73

TI-2025-19292 CVE-2025-26319 · GHSA-69jq-qr7w-j7qh

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

HIGH 82

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.55869 Published 2025-03-04 No fix listed CWE-434

TI-2026-29880 CVE-2026-41274 · GHSA-28g4-38q8-3cwc

Flowise: Cypher Injection in GraphCypherQAChain

HIGH 81

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00505 Published 2026-04-23 Fixed in 3.1.0 CWE-943

TI-2025-43457 CVE-2025-71336 · GHSA-q2xp-j85q-883h

Flowise - Unsandboxed Remote Code Execution via Custom MCP

HIGH 81

Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnerability in the Custom MCP feature, which is designed to execute OS commands such as launching local M…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01148 Published 2026-06-25 Fixed in 3.0.6 CWE-78

TI-2025-43455 CVE-2025-71334 · GHSA-w5r9-j49j-2m55

Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

HIGH 81

Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling operations.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0436 Published 2026-06-25 Fixed in 3.0.6 CWE-73

TI-2025-43454 CVE-2025-71333 · GHSA-grch-cc26-w2fv

Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint

HIGH 81

Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00902 Published 2026-06-25 No fix listed CWE-73

TI-2025-43448 CVE-2025-71327 · GHSA-hh9f-v2g6-c33c

Flowise - Authentication Bypass via Unprotected Registration Endpoint

HIGH 81

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00675 Published 2026-06-25 No fix listed CWE-306

TI-2026-51599 CVE-2026-73487 · GHSA-w7x8-q2gp-5cgg · GHSA-x3jw-7gj7-qv6m

Flowise before 3.1.3 Prompt Injection RCE via CSV Agent

HIGH 80

Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection.

CVSS 4.0CRITICAL 9.0 Network No auth No interaction EPSS 0.00961 Published 2026-08-13 Fixed in 3.1.3 CWE-94

TI-2026-49251 CVE-2026-70478 · GHSA-qgvm-j2hm-6m38

Information disclosure in FlowiseAI Flowise

HIGH 79

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00615 Published 2026-08-04 Fixed in 3.1.2, 3.1.3 CWE-200

TI-2024-07588 CVE-2024-8181 · GHSA-2q4w-x8h2-2fvh

Flowise Authentication Bypass

HIGH 78

An Authentication Bypass vulnerability exists in Flowise version 1.8.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.4505 Published 2024-08-27 No fix listed CWE-287

TI-2026-50257 CVE-2026-71962 · GHSA-mf39-7j64-g95c

Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download

HIGH 77

Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attackers to access private files by exploiting…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00683 Published 2026-08-10 No fix listed CWE-862

TI-2026-49346 CVE-2026-70636 · GHSA-rm9r-9424-cccf

Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint

HIGH 77

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentica…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00663 Published 2026-08-06 No fix listed CWE-862

TI-2026-48597 CVE-2026-69258 · GHSA-6vh2-wg4h-4vwj

Authorization bypass in FlowiseAI Flowise

HIGH 77

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00667 Published 2026-08-04 Fixed in 3.1.3 CWE-639

TI-2026-40635 CVE-2026-56270 · GHSA-6pcv-j4jx-m4vx

Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint

HIGH 77

Flowise before 3.1.0 (versions 3.0.13 and earlier) contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint that allows unauthenticated users to retrieve an organization's complete SSO configur…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02048 Published 2026-06-24 Fixed in 3.1.0 CWE-306

TI-2025-43445 CVE-2025-71324 · GHSA-4pwq-xw7j-m297

Flowise - Arbitrary File Read via chatId Parameter

HIGH 77

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0157 Published 2026-06-25 Fixed in 3.0.6 CWE-73

TI-2026-49243 CVE-2026-70470 · GHSA-52fh-8v99-63c2

Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

HIGH 76

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00972 Published 2026-08-04 Fixed in 3.1.3 CWE-184

TI-2026-48601 CVE-2026-69264 · GHSA-4j8x-x6v7-w9rq

Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

HIGH 76

Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01112 Published 2026-08-04 Fixed in 3.1.3 CWE-94

TI-2026-48598 CVE-2026-69259 · GHSA-x3hf-7cj6-3r4m

Flowise RCE via SQLite Record Manager Node

HIGH 76

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00821 Published 2026-08-04 Fixed in 3.1.3 CWE-94

TI-2026-48595 CVE-2026-69256 · GHSA-x6vm-w76m-8j7g

Flowise: Remote Code Execution Vulnerability in CSVAgent

HIGH 76

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0101 Published 2026-08-04 Fixed in 3.1.3 CWE-94

TI-2026-48593 CVE-2026-69254 · GHSA-3769-jgqc-cxm7

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

HIGH 76

Flowise is a drag & drop user interface to build a customized large language model flow.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00691 Published 2026-08-04 Fixed in 3.1.3 CWE-94

Open these records in search →