flowise

Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete…

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise RCE via SQLite Record Manager Node

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: Remote Code Execution Vulnerability in CSVAgent

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise Sandbox Escape to RCE

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the…

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise RCE via TypeORM DataSource

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

Affected: fixed in 3.1.3.

Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

The latest release, 3.1.4, is not affected.

93% of flowise downloads last week were affected versions (12.6K).

Flowise - Weak Default JWT Secrets in Authentication Middleware

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 118 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise - Path Traversal in Vector Store basePath Parameter

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 114 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise - Session Hijacking via Weak Default Express Session Secret

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 106 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise - Hardcoded CORS Wildcard in TTS Endpoint

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 77 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API

Affected: through 2.2.7.

Fixed in 2.2.8 (released Apr 28, 2025, 423 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

68% of flowise downloads last week were affected versions (9.2K).

Flowise - Unsandboxed Remote Code Execution via Custom MCP

Affected: from 2.2.7-patch.1, fixed in 3.0.6.

Fixed in 3.0.6 (released Sep 15, 2025, 283 days before disclosure).

The latest release, 3.1.4, is not affected.

10% of flowise downloads last week were affected versions (1.4K).

Flowise - Session Invalidation Failure After Password Change

Affected: fixed in 3.0.10.

Fixed in 3.0.10 (released Nov 6, 2025, 231 days before disclosure).

The latest release, 3.1.4, is not affected.

83% of flowise downloads last week were affected versions (11.2K).

Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

Affected: from 2.2.8, fixed in 3.0.6.

Fixed in 3.0.6 (released Sep 15, 2025, 283 days before disclosure).

The latest release, 3.1.4, is not affected.

8.7% of flowise downloads last week were affected versions (1.2K).

Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint

Affected: through 2.2.7.

Fixed in 2.2.8 (released Apr 28, 2025, 423 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

68% of flowise downloads last week were affected versions (9.2K).

Flowise - Authentication Bypass via Unprotected Registration Endpoint

Affected: versions 3.0.1.

Fixed in 3.0.2 (released Jun 11, 2025, 379 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

1.1% of flowise downloads last week were affected versions (153).

Flowise - Arbitrary File Read via chatId Parameter

Affected: from 3.0.5, fixed in 3.0.6.

Fixed in 3.0.6 (released Sep 15, 2025, 283 days before disclosure).

The latest release, 3.1.4, is not affected.

1.8% of flowise downloads last week were affected versions (238).

Flowise - Insufficient Password Salt Rounds in Bcrypt Hashing

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 141 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 100 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise - Weak Default Token Hash Secret in JWT Token Encryption

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 100 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise - SQL Injection in importChatflows API via chatflow.id Parameter

Affected: through 2.2.7.

Fixed in 2.2.8 (released Apr 28, 2025, 422 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

68% of flowise downloads last week were affected versions (9.2K).

Flowise - Server-Side Request Forgery via Execute Flow Base URL

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 99 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 70 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 69 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise - Mass Assignment in PUT /api/v1/user Allows Password Hash Override

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 67 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise - PII Disclosure via Unauthenticated Forgot Password Endpoint

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 137 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise - Cross-Site Scripting in Chat Messages and Agent Workflows

Affected: fixed in 3.0.8.

Fixed in 3.0.8 (released Oct 8, 2025, 255 days before disclosure).

The latest release, 3.1.4, is not affected.

80% of flowise downloads last week were affected versions (10.7K).

Flowise - Remote Code Execution via overrideConfig Parameter

Affected: fixed in 2.1.4.

Fixed in 2.1.4 (released Nov 13, 2024, 584 days before disclosure).

The latest release, 3.1.4, is not affected.

58% of flowise downloads last week were affected versions (7.8K).

Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Credential Data Leak

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Basic Auth Credentials Exposed via API

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: Vector Store No Permission Checks

Affected: fixed in 3.1.2.

Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).

The latest release, 3.1.4, is not affected.

91% of flowise downloads last week were affected versions (12.2K).

Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 56 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

FlowiseAI Flowise API Response account.service.ts login information disclosure

Affected: through 3.0.12.

Fixed in 3.0.13 (released Feb 3, 2026, 92 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise: Cypher Injection in GraphCypherQAChain

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: AccountService resetPassword Authentication Bypass Vulnerability

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Password Reset Link Sent Over Unsecured HTTP

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: File Upload Validation Bypass in createAttachment

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Flowise Parameter Override Bypass Remote Command Execution

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Sensitive Data Leak in public-chatbotConfig

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Code Injection in CSVAgent leads to Authenticated RCE

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise: Authenticated RCE Via MCP Adapters

Affected: fixed in 3.1.0.

Fixed in 3.1.0 (released Mar 16, 2026, 36 days before disclosure).

The latest release, 3.1.4, is not affected.

88% of flowise downloads last week were affected versions (11.9K).

Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 35 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise: Missing Authentication on NVIDIA NIM Endpoints

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise: Mass Assignment in `/api/v1/leads` Endpoint

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise: Arbitrary File Upload via MIME Spoofing

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise Authorization Bypass via Spoofed x-request-from Header

Affected: fixed in 3.0.13.

Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).

The latest release, 3.1.4, is not affected.

87% of flowise downloads last week were affected versions (11.7K).

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.

Affected: from 3.0.5, fixed in 3.0.6.

Fixed in 3.0.6 (released Sep 15, 2025, 32 days before disclosure).

The latest release, 3.1.4, is not affected.

1.8% of flowise downloads last week were affected versions (238).

Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages

Affected: from 3.0.1, fixed in 3.0.8.

Fixed in 3.0.8 (released Oct 8, 2025, 6 days before disclosure).

The latest release, 3.1.4, is not affected.

8.7% of flowise downloads last week were affected versions (1.2K).

Flowise is vulnerable to arbitrary file read, arbitrary file write

Affected: fixed in 3.0.8; fixed in 3.0.8.

Fixed in 3.0.8 (released Oct 8, 2025, the day of disclosure).

The latest release, 3.1.4, is not affected.

80% of flowise downloads last week were affected versions (10.7K).

FlowiseAI/Flosise has File Upload vulnerability

Affected: from 3.0.7, fixed in 3.0.8.

Fixed in 3.0.8 (released Oct 8, 2025, 2 days after disclosure).

The latest release, 3.1.4, is not affected.

1.3% of flowise downloads last week were affected versions (180).

Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log.

Affected: fixed in 3.0.8.

Fixed in 3.0.8 (released Oct 8, 2025, 2 days after disclosure).

The latest release, 3.1.4, is not affected.

80% of flowise downloads last week were affected versions (10.7K).

Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log.

Affected: fixed in 3.0.5.

Fixed in 3.0.5 (released Aug 11, 2025, 56 days before disclosure).

The latest release, 3.1.4, is not affected.

75% of flowise downloads last week were affected versions (10.2K).

Flowise has Remote Code Execution vulnerability

Affected: from 3.0.5, fixed in 3.0.6.

Fixed in 3.0.6 (released Sep 15, 2025, 7 days before disclosure).

The latest release, 3.1.4, is not affected.

1.8% of flowise downloads last week were affected versions (238).

FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

Affected: from 3.0.5, fixed in 3.0.6.

Fixed in 3.0.6 (released Sep 15, 2025, 7 days before disclosure).

The latest release, 3.1.4, is not affected.

1.8% of flowise downloads last week were affected versions (238).

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

Affected: fixed in 3.0.6.

Fixed in 3.0.6 (released Sep 15, 2025, 3 days after disclosure).

The latest release, 3.1.4, is not affected.

77% of flowise downloads last week were affected versions (10.4K).

Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers

Affected: fixed in 3.0.1; through 3.0.5.

Fixed in 3.0.6 (released Sep 15, 2025, 32 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

77% of flowise downloads last week were affected versions (10.4K).

Unintended dynamic code execution leads to remote code execution by network attackers

Affected: versions 0; through 2.2.7-patch.1.

Fixed in 2.2.7 (released Mar 6, 2025, 161 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

67% of flowise downloads last week were affected versions (9.1K).

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

Affected: through 2.2.6.

Fixed in 2.2.7 (released Mar 6, 2025, 2 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

67% of flowise downloads last week were affected versions (9K).

Flowise Stored Cross-Site Scripting

Affected: fixed in 2.1.1.

Fixed in 2.1.1 (released Sep 18, 2024, 6 days before disclosure).

The latest release, 3.1.4, is not affected.

55% of flowise downloads last week were affected versions (7.4K).

Flowise Authentication Bypass

Affected: through 1.8.2.

Fixed in 1.8.3 (released Jun 26, 2024, 62 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

46% of flowise downloads last week were affected versions (6.2K).

Flowise Denial of Service

Affected: through 1.8.2.

Fixed in 1.8.3 (released Jun 26, 2024, 62 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

46% of flowise downloads last week were affected versions (6.2K).

GHSL-2023-248: Flowise xss in /api/v1/credentials/id

Affected: through 1.4.3.

Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

24% of flowise downloads last week were affected versions (3.2K).

GHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/id

Affected: through 1.4.3.

Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

24% of flowise downloads last week were affected versions (3.2K).

GHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id

Affected: through 1.4.3.

Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

24% of flowise downloads last week were affected versions (3.2K).

GHSL-2023-245: Flowise xss in api/v1/chatflows/id

Affected: through 1.4.3.

Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

24% of flowise downloads last week were affected versions (3.2K).

GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts

Affected: through 1.4.3.

Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

24% of flowise downloads last week were affected versions (3.2K).

GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

Affected: through 1.4.3.

Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

The latest release, 3.1.4, is not affected.

24% of flowise downloads last week were affected versions (3.2K).

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1…

Affected: fixed in 1.8.1.

Fixed in 1.8.1 (released May 31, 2024, 32 days after disclosure).

The latest release, 3.1.4, is not affected.

44% of flowise downloads last week were affected versions (6K).