FlowiseAI Flowise

• CVE-2026-119978 High 8.5 Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore 0.3%
• CVE-2026-100610 High 7.5 Flowise through 3.1.4 Missing Authorization via upsert-history 0.3%
• CVE-2026-100609 Medium 6.8 Flowise through 3.1.4 Insecure Direct Object Reference via Credential 0.3%
• CVE-2026-100608 High 8.3 Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard 0.3%
• CVE-2026-100607 High 7.7 Flowise through 3.1.4 Authentication Bypass via Email-Only SSO 0.4%
• CVE-2026-100606 High 7.7 Flowise through 3.1.4 Authentication Bypass via SSO Email Match 0.5%
• CVE-2026-100605 High 7.1 Flowise through 3.1.4 Missing Authorization via Chat Message Routes 0.3%
• CVE-2026-91938 High 7.1 Flowise before 3.1.4 Server-Side Request Forgery via document loaders 0.4%
• CVE-2026-91937 High 7.5 Flowise before 3.1.4 NoSQL Injection via sessionId 0.5%
• CVE-2026-91936 Medium 6.8 Flowise before 3.1.4 Script Injection via Docker Workflows 0.5%
• CVE-2026-91935 High 8.3 Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes 0.4%
• CVE-2026-91934 High 8.8 Flowise before 3.1.4 Remote Code Execution via SQL Database Chain 0.7%
• CVE-2026-91933 High 7.1 Flowise before 3.1.4 Authorization Bypass via openai-realtime 0.4%
• CVE-2026-91932 High 8.5 Flowise before 3.1.4 Remote Code Execution via cwd Parameter 0.7%
• CVE-2026-91931 High 8.5 Flowise before 3.1.4 Remote Code Execution via Custom MCP npx 0.7%
• CVE-2026-91930 High 7.5 Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover 0.4%
• CVE-2026-91929 High 7.1 Flowise before 3.1.4 Cross-Tenant Authorization Bypass 0.4%
• CVE-2026-90580 Medium 6.3 FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery 0.4%
• CVE-2026-90535 Medium 6.3 Flowise before 3.1.4 Denial of Service via text-to-speech/abort 0.5%
• CVE-2026-90534 Medium 6.1 Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method 0.4%
• CVE-2026-90533 Medium 6.0 Flowise before 3.1.4 Broken Access Control via organizationuser 0.3%
• CVE-2026-73604 Medium 6.5 Flowise before 3.1.3 Credential Exposure via API 0.4%
• CVE-2026-73603 Medium 6.3 Flowise before 3.1.4 Credential Abuse via Text-to-Speech 0.3%
• CVE-2026-73602 Critical 9.0 Flowise before 3.1.3 Sandbox Escape to RCE 0.8%
• CVE-2026-73601 Critical 9.0 Flowise before 3.1.3 Remote Code Execution via Custom MCP 1.1%
• CVE-2026-73488 Medium 6.0 Flowise before 3.1.3 IDOR via customer-default-source endpoint 0.4%
• CVE-2026-73487 Critical 9.0 Flowise before 3.1.3 Prompt Injection RCE via CSV Agent 1.0%
• CVE-2026-73486 Critical 9.0 Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV 0.7%
• CVE-2026-73485 Critical 9.0 Flowise before 3.1.3 Remote Code Execution via Airtable Agent 0.6%
• CVE-2026-73484 High 8.6 Flowise before 3.1.3 Sandbox Escape via Pandas Methods 0.4%
• CVE-2026-73483 Critical 9.4 Flowise before 3.1.3 Sandbox Escape via Puppeteer 0.6%
• CVE-2026-71962 High 7.5 Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download 0.7%
• CVE-2026-67620 High 7.7 Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List 0.5%
• CVE-2026-70636 High 7.5 Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint 0.7%
• CVE-2026-67622 Critical 9.9 Flowise 3.1.4 IDOR in OpenAI Assistants Integration 0.5%
• CVE-2026-67621 High 7.6 Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints 0.4%
• CVE-2026-70478 Critical 9.2 Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service 0.6%
• CVE-2026-70477 Critical 9.5 Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability 0.8%
• CVE-2026-70476 High 8.3 Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation 0.5%
• CVE-2026-70475 High 7.1 Flowise: Missing Authorization on Execution Update Endpoint 0.5%
• CVE-2026-70474 High 7.6 Flowise: Cross-Workspace OAuth2 Credential Metadata Leak 0.5%
• CVE-2026-70473 High 8.3 Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history 0.5%
• CVE-2026-70472 High 7.1 Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store 0.5%
• CVE-2026-70471 High 7.1 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure 0.4%
• CVE-2026-70470 Critical 9.5 Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE 1.0%
• CVE-2026-69264 Critical 9.4 Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation 1.1%
• CVE-2026-69263 High 8.7 Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) 0.7%
• CVE-2026-69262 High 7.1 Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type 0.5%
• CVE-2026-69259 Critical 9.4 Flowise RCE via SQLite Record Manager Node 0.8%
• CVE-2026-69258 High 8.8 Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API 0.7%