Vulnerability · Published Jun 25, 2026 · Assigned by VulnCheck

CVE-2025-71324Flowise - Arbitrary File Read via chatId Parameter

High 7.5

In plain English

A high-severity security flaw in Flowise from Flowise. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 75% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.6%top 24.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	flowise	3.0.6	GHSA-99pg-hqvx-r4gf

Affected products (as reported)

Vendor	Product	Versions
Flowise	Flowise	0 – before 3.0.6

Weakness: CWE-73 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-99pg-hqvx-r4gf) vendor-advisory
VulnCheck Advisory: Flowise - Arbitrary File Read via chatId Parameter third-party-advisory