FlowiseAI Flowise

• CVE-2026-69257 High 7.6 Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses 0.4%
• CVE-2026-69256 Critical 9.4 Flowise: Remote Code Execution Vulnerability in CSVAgent 1.0%
• CVE-2026-69255 Critical 9.2 Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified 0.6%
• CVE-2026-69254 Critical 9.4 Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override 0.7%
• CVE-2026-69253 Critical 9.0 Flowise Sandbox Escape to RCE 0.7%
• CVE-2026-69252 High 7.2 Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization 0.5%
• CVE-2026-69251 Critical 9.0 Flowise RCE via TypeORM DataSource 2.7%
• CVE-2026-69250 High 8.5 Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration 0.6%
• CVE-2026-12821 Medium 6.3 FlowiseAI Flowise S3 Document Loader S3.ts path traversal 0.5%
• CVE-2026-46480 High 7.7 Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover 0.3%
• CVE-2026-46479 High 7.7 Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover 0.3%
• CVE-2026-46478 High 7.7 Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover 0.3%
• CVE-2026-46477 High 7.7 Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover 0.3%
• CVE-2026-46476 High 7.7 Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover 0.3%
• CVE-2026-46475 High 7.7 Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover 0.3%
• CVE-2026-46443 High 7.0 Flowise: Credential Data Leak 0.3%
• CVE-2026-46442 Critical 9.4 Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape 33.0%
• CVE-2026-46441 High 7.6 Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment 0.3%
• CVE-2026-46440 High 7.5 Flowise: Basic Auth Credentials Exposed via API 0.2%
• CVE-2026-42863 High 7.6 Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment 0.3%
• CVE-2026-42862 High 7.6 Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment 0.2%
• CVE-2026-42861 High 7.6 Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment 0.3%
• CVE-2026-46444 High 8.7 Flowise: Vector Store No Permission Checks 0.3%
• CVE-2026-43995 Medium 5.3 Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) 0.4%
• CVE-2026-8028 Low 3.7 FlowiseAI Flowise Endpoint account.service.ts verify information disclosure 0.4%
• CVE-2026-8027 Medium 4.3 FlowiseAI Flowise User Controller authorization 0.3%
• CVE-2026-8026 Low 3.7 FlowiseAI Flowise API Response account.service.ts login information disclosure 0.3%
• CVE-2026-41274 Critical 9.3 Flowise: Cypher Injection in GraphCypherQAChain 0.5%
• CVE-2026-41264 Critical 9.2 Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability 1.8%
• CVE-2026-41265 Critical 9.2 Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability 0.6%
• CVE-2026-41279 High 8.2 Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials 0.3%
• CVE-2026-41278 High 8.7 Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs 0.4%
• CVE-2026-41276 High 7.7 Flowise: AccountService resetPassword Authentication Bypass Vulnerability 6.9%
• CVE-2026-41277 High 7.6 Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) 3.1%
• CVE-2026-41275 High 7.5 Flowise: Password Reset Link Sent Over Unsecured HTTP 0.2%
• CVE-2026-41273 High 7.7 Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow 0.3%
• CVE-2026-41271 High 7.1 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains 0.2%
• CVE-2026-41272 High 7.1 Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) 0.3%
• CVE-2026-41270 High 7.1 Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox 0.2%
• CVE-2026-41269 High 7.1 Flowise: File Upload Validation Bypass in createAttachment 0.5%
• CVE-2026-41268 High 7.7 Flowise: Flowise Parameter Override Bypass Remote Command Execution 17.4%
• CVE-2026-41267 High 8.1 Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association 0.3%
• CVE-2026-41266 High 7.7 Flowise: Sensitive Data Leak in public-chatbotConfig 4.1%
• CVE-2026-41137 Critical 9.4 Flowise: Code Injection in CSVAgent leads to Authenticated RCE 1.5%
• CVE-2026-41138 High 8.3 Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas. 0.6%
• CVE-2026-40933 Critical 10.0 Flowise: Authenticated RCE Via MCP Adapters 12.0%
• CVE-2026-31829 High 7.1 Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access 2.7%
• CVE-2026-30824 High 7.7 Flowise: Missing Authentication on NVIDIA NIM Endpoints 37.3%
• CVE-2026-30823 High 8.8 Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration 0.5%
• CVE-2026-30822 High 7.7 Flowise: Mass Assignment in `/api/v1/leads` Endpoint 15.0%