# flowise (npm) vulnerabilities

113 known vulnerabilities (35 critical, 60 high, 18 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: 3.1.4 (Jul 29, 2026): no advisory affects it
- Newest unaffected release: 3.1.4 (Jul 29, 2026), the latest release
- Weekly downloads: 4,647
- Dependents: 0
- Releases: 104 since 1.0.0 (Apr 10, 2023)
- Registry: https://www.npmjs.com/package/flowise
- Releases read: Nov 8, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-119978: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-73604: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-73603: 1.0.0 to 3.1.3 (3.1.4 is outside it)
- CVE-2026-73488: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-73487: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-73483: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70478: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70477: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70476: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70475: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70474: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70473: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70472: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70471: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-70470: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69264: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69263: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69262: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69259: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69258: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69257: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69256: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69255: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69254: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69253: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69252: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69251: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-69250: 1.0.0 to 3.1.2 (3.1.3 is outside it)
- CVE-2026-56271: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-56273: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-56278: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-56277: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2025-71338: 1.0.0 to 2.2.7 (2.2.8 is outside it)
- CVE-2025-71336: 2.2.7-patch.1 to 3.0.5 (3.0.6 is outside it)
- CVE-2025-71335: 1.0.0 to 3.0.8 (3.0.10 is outside it)
- CVE-2025-71334: 2.2.8 to 3.0.5 (3.0.6 is outside it)
- CVE-2025-71333: 1.0.0 to 2.2.7 (2.2.8 is outside it)
- CVE-2025-71327: 3.0.1 (3.0.2 is outside it)
- CVE-2025-71324: 3.0.5 (3.0.6 is outside it)
- CVE-2026-56272: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2026-56270: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-56269: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2025-71332: 1.0.0 to 2.2.7 (2.2.8 is outside it)
- CVE-2026-56275: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-56274: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-56268: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-56276: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-56267: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2025-71331: 1.0.0 to 3.0.7 (3.0.8 is outside it)
- CVE-2024-58351: 1.0.0 to 2.1.3 (2.1.4 is outside it)
- CVE-2026-46480: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46479: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46478: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46477: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46476: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46475: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46443: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46442: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46441: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46440: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-42863: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-42862: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-42861: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-46444: 1.0.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2026-43995: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-8026: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2026-41274: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41264: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41265: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41279: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41278: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41276: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41277: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41275: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41273: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41271: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41272: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41270: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41269: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41268: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41267: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41266: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41137: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-41138: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-40933: 1.0.0 to 3.0.13 (3.1.0 is outside it)
- CVE-2026-31829: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2026-30824: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2026-30823: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2026-30822: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2026-30821: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2026-30820: 1.0.0 to 3.0.12 (3.0.13 is outside it)
- CVE-2025-57164: 3.0.5 (3.0.6 is outside it)
- CVE-2025-34267: 3.0.1 to 3.0.7 (3.0.8 is outside it)
- CVE-2025-61913: 1.0.0 to 3.0.7 (3.0.8 is outside it)
- CVE-2025-61687: 3.0.7 (3.0.8 is outside it)
- CVE-2025-50538: 1.0.0 to 3.0.7 (3.0.8 is outside it)
- CVE-2025-29192: 1.0.0 to 3.0.4 (3.0.5 is outside it)
- CVE-2025-59528: 3.0.5 (3.0.6 is outside it)
- CVE-2025-59527: 3.0.5 (3.0.6 is outside it)
- CVE-2025-58434: 1.0.0 to 3.0.5 (3.0.6 is outside it)
- CVE-2025-8943: 1.0.0 to 3.0.5 (3.0.6 is outside it)
- CVE-2025-55346: 1.0.0 to 2.2.7-patch.1 (2.2.7 is outside it)
- CVE-2025-26319: 1.0.0 to 2.2.6 (2.2.7-patch.1 is outside it)
- CVE-2024-9148: 1.0.0 to 2.1.0 (2.1.1 is outside it)
- CVE-2024-8181: 1.0.0 to 1.8.2 (1.8.3 is outside it)
- CVE-2024-8182: 1.0.0 to 1.8.2 (1.8.3 is outside it)
- CVE-2024-37146: 1.0.0 to 1.4.3 (1.4.4 is outside it)
- CVE-2024-37145: 1.0.0 to 1.4.3 (1.4.4 is outside it)
- CVE-2024-36423: 1.0.0 to 1.4.3 (1.4.4 is outside it)
- CVE-2024-36422: 1.0.0 to 1.4.3 (1.4.4 is outside it)
- CVE-2024-36421: 1.0.0 to 1.4.3 (1.4.4 is outside it)
- CVE-2024-36420: 1.0.0 to 1.4.3 (1.4.4 is outside it)
- CVE-2024-31621: 1.0.0 to 1.8.0 (1.8.1 is outside it)

## Advisories (113)

### [CVE-2026-119978](https://cve.now/CVE-2026-119978): Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore

- Severity: Critical 9.0
- Published: Oct 30, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 127 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-73604](https://cve.now/CVE-2026-73604): Flowise before 3.1.3 Credential Exposure via API

- Severity: High 7.1
- Published: Aug 13, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-73603](https://cve.now/CVE-2026-73603): Flowise before 3.1.4 Credential Abuse via Text-to-Speech

- Severity: Medium 6.3
- Published: Aug 13, 2026
- Affected: fixed in 3.1.4.
- Fixed in 3.1.4 (released Jul 29, 2026, 15 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 94% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-73488](https://cve.now/CVE-2026-73488): Flowise before 3.1.3 IDOR via customer-default-source endpoint

- Severity: Medium 6.0
- Published: Aug 13, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-73487](https://cve.now/CVE-2026-73487): Flowise before 3.1.3 Prompt Injection RCE via CSV Agent

- Severity: Critical 9.0
- Published: Aug 13, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-73483](https://cve.now/CVE-2026-73483): Flowise before 3.1.3 Sandbox Escape via Puppeteer

- Severity: Critical 9.4
- Published: Aug 13, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70478](https://cve.now/CVE-2026-70478): Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service

- Severity: Critical 9.2
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70477](https://cve.now/CVE-2026-70477): Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

- Severity: Critical 9.5
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70476](https://cve.now/CVE-2026-70476): Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation

- Severity: High 8.3
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70475](https://cve.now/CVE-2026-70475): Flowise: Missing Authorization on Execution Update Endpoint

- Severity: High 7.1
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70474](https://cve.now/CVE-2026-70474): Flowise: Cross-Workspace OAuth2 Credential Metadata Leak

- Severity: High 7.6
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70473](https://cve.now/CVE-2026-70473): Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

- Severity: High 8.3
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70472](https://cve.now/CVE-2026-70472): Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

- Severity: High 7.1
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70471](https://cve.now/CVE-2026-70471): Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

- Severity: High 7.1
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-70470](https://cve.now/CVE-2026-70470): Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

- Severity: Critical 9.5
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69264](https://cve.now/CVE-2026-69264): Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

- Severity: Critical 9.4
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69263](https://cve.now/CVE-2026-69263): Flowise: CVE-2025-8943 Patch Bypass: npm\_config\_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

- Severity: High 8.7
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69262](https://cve.now/CVE-2026-69262): Flowise: \`DELETE /api/v1/chatflows/:id\` does not validate resource type, allowing \`agentflows:delete\` and \`chatflows:delete\` to delete…

- Severity: High 7.1
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69259](https://cve.now/CVE-2026-69259): Flowise RCE via SQLite Record Manager Node

- Severity: Critical 9.4
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69258](https://cve.now/CVE-2026-69258): Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated \`overrideConfig\` Spread in Prediction API

- Severity: High 8.8
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69257](https://cve.now/CVE-2026-69257): Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

- Severity: High 7.6
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69256](https://cve.now/CVE-2026-69256): Flowise: Remote Code Execution Vulnerability in CSVAgent

- Severity: Critical 9.4
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69255](https://cve.now/CVE-2026-69255): Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

- Severity: Critical 9.2
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69254](https://cve.now/CVE-2026-69254): Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

- Severity: Critical 9.4
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69253](https://cve.now/CVE-2026-69253): Flowise Sandbox Escape to RCE

- Severity: Critical 9.0
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69252](https://cve.now/CVE-2026-69252): Flowise: Missing authorization on \`/api/v1/files\` allows low-privileged API keys to list and delete files across workspaces within the…

- Severity: High 7.2
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69251](https://cve.now/CVE-2026-69251): Flowise RCE via TypeORM DataSource

- Severity: Critical 9.0
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-69250](https://cve.now/CVE-2026-69250): Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

- Severity: High 8.5
- Published: Aug 4, 2026
- Affected: fixed in 3.1.3.
- Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 93% of flowise downloads last week were affected versions (12.6K).

### [CVE-2026-56271](https://cve.now/CVE-2026-56271): Flowise - Weak Default JWT Secrets in Authentication Middleware

- Severity: Critical 9.3
- Published: Jul 12, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 118 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-56273](https://cve.now/CVE-2026-56273): Flowise - Path Traversal in Vector Store basePath Parameter

- Severity: Medium 4.9
- Published: Jul 8, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 114 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-56278](https://cve.now/CVE-2026-56278): Flowise - Session Hijacking via Weak Default Express Session Secret

- Severity: Critical 9.3
- Published: Jun 30, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 106 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-56277](https://cve.now/CVE-2026-56277): Flowise - Hardcoded CORS Wildcard in TTS Endpoint

- Severity: Medium 6.9
- Published: Jun 30, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 77 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2025-71338](https://cve.now/CVE-2025-71338): Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API

- Severity: Critical 10.0
- Published: Jun 25, 2026
- Affected: through 2.2.7.
- Fixed in 2.2.8 (released Apr 28, 2025, 423 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 68% of flowise downloads last week were affected versions (9.2K).

### [CVE-2025-71336](https://cve.now/CVE-2025-71336): Flowise - Unsandboxed Remote Code Execution via Custom MCP

- Severity: Critical 9.3
- Published: Jun 25, 2026
- Affected: from 2.2.7-patch.1, fixed in 3.0.6.
- Fixed in 3.0.6 (released Sep 15, 2025, 283 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 10% of flowise downloads last week were affected versions (1.4K).

### [CVE-2025-71335](https://cve.now/CVE-2025-71335): Flowise - Session Invalidation Failure After Password Change

- Severity: High 8.6
- Published: Jun 25, 2026
- Affected: fixed in 3.0.10.
- Fixed in 3.0.10 (released Nov 6, 2025, 231 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 83% of flowise downloads last week were affected versions (11.2K).

### [CVE-2025-71334](https://cve.now/CVE-2025-71334): Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

- Severity: Critical 9.3
- Published: Jun 25, 2026
- Affected: from 2.2.8, fixed in 3.0.6.
- Fixed in 3.0.6 (released Sep 15, 2025, 283 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 8.7% of flowise downloads last week were affected versions (1.2K).

### [CVE-2025-71333](https://cve.now/CVE-2025-71333): Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint

- Severity: Critical 9.3
- Published: Jun 25, 2026
- Affected: through 2.2.7.
- Fixed in 2.2.8 (released Apr 28, 2025, 423 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 68% of flowise downloads last week were affected versions (9.2K).

### [CVE-2025-71327](https://cve.now/CVE-2025-71327): Flowise - Authentication Bypass via Unprotected Registration Endpoint

- Severity: Critical 9.3
- Published: Jun 25, 2026
- Affected: versions 3.0.1.
- Fixed in 3.0.2 (released Jun 11, 2025, 379 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 1.1% of flowise downloads last week were affected versions (153).

### [CVE-2025-71324](https://cve.now/CVE-2025-71324): Flowise - Arbitrary File Read via chatId Parameter

- Severity: High 8.7
- Published: Jun 25, 2026
- Affected: from 3.0.5, fixed in 3.0.6.
- Fixed in 3.0.6 (released Sep 15, 2025, 283 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 1.8% of flowise downloads last week were affected versions (238).

### [CVE-2026-56272](https://cve.now/CVE-2026-56272): Flowise - Insufficient Password Salt Rounds in Bcrypt Hashing

- Severity: Medium 5.6
- Published: Jun 24, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 141 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2026-56270](https://cve.now/CVE-2026-56270): Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint

- Severity: High 8.7
- Published: Jun 24, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 100 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-56269](https://cve.now/CVE-2026-56269): Flowise - Weak Default Token Hash Secret in JWT Token Encryption

- Severity: Medium 4.3
- Published: Jun 24, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 100 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2025-71332](https://cve.now/CVE-2025-71332): Flowise - SQL Injection in importChatflows API via chatflow.id Parameter

- Severity: High 8.5
- Published: Jun 24, 2026
- Affected: through 2.2.7.
- Fixed in 2.2.8 (released Apr 28, 2025, 422 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 68% of flowise downloads last week were affected versions (9.2K).

### [CVE-2026-56275](https://cve.now/CVE-2026-56275): Flowise - Server-Side Request Forgery via Execute Flow Base URL

- Severity: Medium 6.0
- Published: Jun 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 99 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-56274](https://cve.now/CVE-2026-56274): Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

- Severity: High 8.7
- Published: Jun 23, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 70 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-56268](https://cve.now/CVE-2026-56268): Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint

- Severity: Medium 5.3
- Published: Jun 22, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 69 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-56276](https://cve.now/CVE-2026-56276): Flowise - Mass Assignment in PUT /api/v1/user Allows Password Hash Override

- Severity: Medium 6.0
- Published: Jun 20, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 67 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-56267](https://cve.now/CVE-2026-56267): Flowise - PII Disclosure via Unauthenticated Forgot Password Endpoint

- Severity: Medium 6.9
- Published: Jun 20, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 137 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2025-71331](https://cve.now/CVE-2025-71331): Flowise - Cross-Site Scripting in Chat Messages and Agent Workflows

- Severity: Medium 5.1
- Published: Jun 20, 2026
- Affected: fixed in 3.0.8.
- Fixed in 3.0.8 (released Oct 8, 2025, 255 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 80% of flowise downloads last week were affected versions (10.7K).

### [CVE-2024-58351](https://cve.now/CVE-2024-58351): Flowise - Remote Code Execution via overrideConfig Parameter

- Severity: Critical 9.3
- Published: Jun 20, 2026
- Affected: fixed in 2.1.4.
- Fixed in 2.1.4 (released Nov 13, 2024, 584 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 58% of flowise downloads last week were affected versions (7.8K).

### [CVE-2026-46480](https://cve.now/CVE-2026-46480): Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

- Severity: High 7.7
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46479](https://cve.now/CVE-2026-46479): Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

- Severity: High 7.7
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46478](https://cve.now/CVE-2026-46478): Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover

- Severity: High 7.7
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46477](https://cve.now/CVE-2026-46477): Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover

- Severity: High 7.7
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46476](https://cve.now/CVE-2026-46476): Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

- Severity: High 7.7
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46475](https://cve.now/CVE-2026-46475): Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover

- Severity: High 7.7
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46443](https://cve.now/CVE-2026-46443): Flowise: Credential Data Leak

- Severity: High 7.0
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46442](https://cve.now/CVE-2026-46442): Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

- Severity: Critical 9.4
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46441](https://cve.now/CVE-2026-46441): Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment

- Severity: High 7.6
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46440](https://cve.now/CVE-2026-46440): Flowise: Basic Auth Credentials Exposed via API

- Severity: High 7.5
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-42863](https://cve.now/CVE-2026-42863): Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment

- Severity: High 7.6
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-42862](https://cve.now/CVE-2026-42862): Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment

- Severity: High 7.6
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-42861](https://cve.now/CVE-2026-42861): Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment

- Severity: High 7.6
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-46444](https://cve.now/CVE-2026-46444): Flowise: Vector Store No Permission Checks

- Severity: High 8.7
- Published: Jun 8, 2026
- Affected: fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 14, 2026, 55 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 91% of flowise downloads last week were affected versions (12.2K).

### [CVE-2026-43995](https://cve.now/CVE-2026-43995): Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

- Severity: Medium 5.3
- Published: May 11, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 56 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-8026](https://cve.now/CVE-2026-8026): FlowiseAI Flowise API Response account.service.ts login information disclosure

- Severity: Medium 6.3
- Published: May 6, 2026
- Affected: through 3.0.12.
- Fixed in 3.0.13 (released Feb 3, 2026, 92 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2026-41274](https://cve.now/CVE-2026-41274): Flowise: Cypher Injection in GraphCypherQAChain

- Severity: Critical 9.3
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41264](https://cve.now/CVE-2026-41264): Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

- Severity: Critical 9.2
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41265](https://cve.now/CVE-2026-41265): Flowise: Airtable\_Agent Code Injection Remote Code Execution Vulnerability

- Severity: Critical 9.2
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41279](https://cve.now/CVE-2026-41279): Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

- Severity: High 8.2
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41278](https://cve.now/CVE-2026-41278): Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

- Severity: High 8.7
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41276](https://cve.now/CVE-2026-41276): Flowise: AccountService resetPassword Authentication Bypass Vulnerability

- Severity: High 7.7
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41277](https://cve.now/CVE-2026-41277): Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

- Severity: High 7.6
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41275](https://cve.now/CVE-2026-41275): Flowise: Password Reset Link Sent Over Unsecured HTTP

- Severity: High 7.5
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41273](https://cve.now/CVE-2026-41273): Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow

- Severity: High 7.7
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41271](https://cve.now/CVE-2026-41271): Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

- Severity: High 7.1
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41272](https://cve.now/CVE-2026-41272): Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

- Severity: High 7.1
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41270](https://cve.now/CVE-2026-41270): Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

- Severity: High 7.1
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41269](https://cve.now/CVE-2026-41269): Flowise: File Upload Validation Bypass in createAttachment

- Severity: High 7.1
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41268](https://cve.now/CVE-2026-41268): Flowise: Flowise Parameter Override Bypass Remote Command Execution

- Severity: High 7.7
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41267](https://cve.now/CVE-2026-41267): Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

- Severity: High 8.1
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41266](https://cve.now/CVE-2026-41266): Flowise: Sensitive Data Leak in public-chatbotConfig

- Severity: High 7.7
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41137](https://cve.now/CVE-2026-41137): Flowise: Code Injection in CSVAgent leads to Authenticated RCE

- Severity: Critical 9.4
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-41138](https://cve.now/CVE-2026-41138): Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.

- Severity: High 8.3
- Published: Apr 23, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-40933](https://cve.now/CVE-2026-40933): Flowise: Authenticated RCE Via MCP Adapters

- Severity: Critical 10.0
- Published: Apr 21, 2026
- Affected: fixed in 3.1.0.
- Fixed in 3.1.0 (released Mar 16, 2026, 36 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 88% of flowise downloads last week were affected versions (11.9K).

### [CVE-2026-31829](https://cve.now/CVE-2026-31829): Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access

- Severity: High 7.1
- Published: Mar 10, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 35 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2026-30824](https://cve.now/CVE-2026-30824): Flowise: Missing Authentication on NVIDIA NIM Endpoints

- Severity: High 7.7
- Published: Mar 7, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2026-30823](https://cve.now/CVE-2026-30823): Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

- Severity: High 8.8
- Published: Mar 7, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2026-30822](https://cve.now/CVE-2026-30822): Flowise: Mass Assignment in \`/api/v1/leads\` Endpoint

- Severity: High 7.7
- Published: Mar 7, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2026-30821](https://cve.now/CVE-2026-30821): Flowise: Arbitrary File Upload via MIME Spoofing

- Severity: High 8.2
- Published: Mar 7, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2026-30820](https://cve.now/CVE-2026-30820): Flowise Authorization Bypass via Spoofed x-request-from Header

- Severity: High 8.7
- Published: Mar 7, 2026
- Affected: fixed in 3.0.13.
- Fixed in 3.0.13 (released Feb 3, 2026, 32 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 87% of flowise downloads last week were affected versions (11.7K).

### [CVE-2025-57164](https://cve.now/CVE-2025-57164): Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.

- Severity: Medium 6.5
- Published: Oct 17, 2025
- Affected: from 3.0.5, fixed in 3.0.6.
- Fixed in 3.0.6 (released Sep 15, 2025, 32 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 1.8% of flowise downloads last week were affected versions (238).

### [CVE-2025-34267](https://cve.now/CVE-2025-34267): Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages

- Severity: High 8.4
- Published: Oct 14, 2025
- Affected: from 3.0.1, fixed in 3.0.8.
- Fixed in 3.0.8 (released Oct 8, 2025, 6 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 8.7% of flowise downloads last week were affected versions (1.2K).

### [CVE-2025-61913](https://cve.now/CVE-2025-61913): Flowise is vulnerable to arbitrary file read, arbitrary file write

- Severity: Critical 10.0
- Published: Oct 8, 2025
- Affected: fixed in 3.0.8; fixed in 3.0.8.
- Fixed in 3.0.8 (released Oct 8, 2025, the day of disclosure).
- The latest release, 3.1.4, is not affected.
- 80% of flowise downloads last week were affected versions (10.7K).

### [CVE-2025-61687](https://cve.now/CVE-2025-61687): FlowiseAI/Flosise has File Upload vulnerability

- Severity: High 8.3
- Published: Oct 6, 2025
- Affected: from 3.0.7, fixed in 3.0.8.
- Fixed in 3.0.8 (released Oct 8, 2025, 2 days after disclosure).
- The latest release, 3.1.4, is not affected.
- 1.3% of flowise downloads last week were affected versions (180).

### [CVE-2025-50538](https://cve.now/CVE-2025-50538): Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log.

- Severity: High 8.2
- Published: Oct 6, 2025
- Affected: fixed in 3.0.8.
- Fixed in 3.0.8 (released Oct 8, 2025, 2 days after disclosure).
- The latest release, 3.1.4, is not affected.
- 80% of flowise downloads last week were affected versions (10.7K).

### [CVE-2025-29192](https://cve.now/CVE-2025-29192): Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log.

- Severity: High 8.2
- Published: Oct 6, 2025
- Affected: fixed in 3.0.5.
- Fixed in 3.0.5 (released Aug 11, 2025, 56 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 75% of flowise downloads last week were affected versions (10.2K).

### [CVE-2025-59528](https://cve.now/CVE-2025-59528): Flowise has Remote Code Execution vulnerability

- Severity: Critical 10.0
- Published: Sep 22, 2025
- Affected: from 3.0.5, fixed in 3.0.6.
- Fixed in 3.0.6 (released Sep 15, 2025, 7 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 1.8% of flowise downloads last week were affected versions (238).

### [CVE-2025-59527](https://cve.now/CVE-2025-59527): FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

- Severity: High 7.5
- Published: Sep 22, 2025
- Affected: from 3.0.5, fixed in 3.0.6.
- Fixed in 3.0.6 (released Sep 15, 2025, 7 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 1.8% of flowise downloads last week were affected versions (238).

### [CVE-2025-58434](https://cve.now/CVE-2025-58434): Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

- Severity: Critical 9.8
- Published: Sep 12, 2025
- Affected: fixed in 3.0.6.
- Fixed in 3.0.6 (released Sep 15, 2025, 3 days after disclosure).
- The latest release, 3.1.4, is not affected.
- 77% of flowise downloads last week were affected versions (10.4K).

### [CVE-2025-8943](https://cve.now/CVE-2025-8943): Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers

- Severity: Critical 9.8
- Published: Aug 14, 2025
- Affected: fixed in 3.0.1; through 3.0.5.
- Fixed in 3.0.6 (released Sep 15, 2025, 32 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 77% of flowise downloads last week were affected versions (10.4K).

### [CVE-2025-55346](https://cve.now/CVE-2025-55346): Unintended dynamic code execution leads to remote code execution by network attackers

- Severity: Critical 9.8
- Published: Aug 14, 2025
- Affected: versions 0; through 2.2.7-patch.1.
- Fixed in 2.2.7 (released Mar 6, 2025, 161 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 67% of flowise downloads last week were affected versions (9.1K).

### [CVE-2025-26319](https://cve.now/CVE-2025-26319): FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

- Severity: Critical 9.8
- Published: Mar 4, 2025
- Affected: through 2.2.6.
- Fixed in 2.2.7 (released Mar 6, 2025, 2 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 67% of flowise downloads last week were affected versions (9K).

### [CVE-2024-9148](https://cve.now/CVE-2024-9148): Flowise Stored Cross-Site Scripting

- Severity: Critical 9.6
- Published: Sep 24, 2024
- Affected: fixed in 2.1.1.
- Fixed in 2.1.1 (released Sep 18, 2024, 6 days before disclosure).
- The latest release, 3.1.4, is not affected.
- 55% of flowise downloads last week were affected versions (7.4K).

### [CVE-2024-8181](https://cve.now/CVE-2024-8181): Flowise Authentication Bypass

- Severity: Critical 9.8
- Published: Aug 27, 2024
- Affected: through 1.8.2.
- Fixed in 1.8.3 (released Jun 26, 2024, 62 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 46% of flowise downloads last week were affected versions (6.2K).

### [CVE-2024-8182](https://cve.now/CVE-2024-8182): Flowise Denial of Service

- Severity: High 7.5
- Published: Aug 27, 2024
- Affected: through 1.8.2.
- Fixed in 1.8.3 (released Jun 26, 2024, 62 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 46% of flowise downloads last week were affected versions (6.2K).

### [CVE-2024-37146](https://cve.now/CVE-2024-37146): GHSL-2023-248: Flowise xss in /api/v1/credentials/id

- Severity: Medium 6.1
- Published: Jul 1, 2024
- Affected: through 1.4.3.
- Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 24% of flowise downloads last week were affected versions (3.2K).

### [CVE-2024-37145](https://cve.now/CVE-2024-37145): GHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/id

- Severity: Medium 6.1
- Published: Jul 1, 2024
- Affected: through 1.4.3.
- Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 24% of flowise downloads last week were affected versions (3.2K).

### [CVE-2024-36423](https://cve.now/CVE-2024-36423): GHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id

- Severity: Medium 6.1
- Published: Jul 1, 2024
- Affected: through 1.4.3.
- Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 24% of flowise downloads last week were affected versions (3.2K).

### [CVE-2024-36422](https://cve.now/CVE-2024-36422): GHSL-2023-245: Flowise xss in api/v1/chatflows/id

- Severity: Medium 6.1
- Published: Jul 1, 2024
- Affected: through 1.4.3.
- Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 24% of flowise downloads last week were affected versions (3.2K).

### [CVE-2024-36421](https://cve.now/CVE-2024-36421): GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts

- Severity: High 7.5
- Published: Jul 1, 2024
- Affected: through 1.4.3.
- Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 24% of flowise downloads last week were affected versions (3.2K).

### [CVE-2024-36420](https://cve.now/CVE-2024-36420): GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

- Severity: High 7.5
- Published: Jul 1, 2024
- Affected: through 1.4.3.
- Fixed in 1.4.4 (released Dec 8, 2023, 206 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
- The latest release, 3.1.4, is not affected.
- 24% of flowise downloads last week were affected versions (3.2K).

### [CVE-2024-31621](https://cve.now/CVE-2024-31621): An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1…

- Severity: High 7.6
- Published: Apr 29, 2024
- Affected: fixed in 1.8.1.
- Fixed in 1.8.1 (released May 31, 2024, 32 days after disclosure).
- The latest release, 3.1.4, is not affected.
- 44% of flowise downloads last week were affected versions (6K).

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/npm/flowise
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.