Vulnerability · Published Oct 8, 2025 · Assigned by GitHub_M

CVE-2025-61913Flowise is vulnerable to arbitrary file read, arbitrary file write

Critical 10.0

In plain English

A critical-severity path traversal in Flowise from FlowiseAI. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 13.9% (higher than 97% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)13.9%top 3.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any path in the file system, potentially leading to remote command execution. Flowise 3.0.8 fixes this vulnerability.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	flowise	3.0.8	GHSA-jv9m-vf54-chjj
npm	flowise	3.0.8	GHSA-jv9m-vf54-chjj
npm	flowise-components	3.0.8	GHSA-jv9m-vf54-chjj

Affected products (as reported)

Vendor	Product	Versions
FlowiseAI	Flowise	< 3.0.8

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jv9m-vf54-chjj x_refsource_CONFIRM
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-j44m-5v8f-gc9c x_refsource_MISC
https://github.com/FlowiseAI/Flowise/commit/1fb12cd93143592a18995f63b781d25b354d48a3 x_refsource_MISC
https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.8 x_refsource_MISC