# cve.now: Flowiseai

The newest entries naming Flowiseai as an affected vendor (up to 200), of 120 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119978](https://cve.now/CVE-2026-119978.md): Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore (CVSS 9.0)
- [CVE-2026-100610](https://cve.now/CVE-2026-100610.md): Flowise through 3.1.4 Missing Authorization via upsert-history (CVSS 7.7)
- [CVE-2026-100609](https://cve.now/CVE-2026-100609.md): Flowise through 3.1.4 Insecure Direct Object Reference via Credential (CVSS 7.6)
- [CVE-2026-100608](https://cve.now/CVE-2026-100608.md): Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard (CVSS 8.7)
- [CVE-2026-100607](https://cve.now/CVE-2026-100607.md): Flowise through 3.1.4 Authentication Bypass via Email-Only SSO (CVSS 9.2)
- [CVE-2026-100606](https://cve.now/CVE-2026-100606.md): Flowise through 3.1.4 Authentication Bypass via SSO Email Match (CVSS 9.2)
- [CVE-2026-100605](https://cve.now/CVE-2026-100605.md): Flowise through 3.1.4 Missing Authorization via Chat Message Routes (CVSS 7.5)
- [CVE-2026-91938](https://cve.now/CVE-2026-91938.md): Flowise before 3.1.4 Server-Side Request Forgery via document loaders (CVSS 7.1)
- [CVE-2026-91937](https://cve.now/CVE-2026-91937.md): Flowise before 3.1.4 NoSQL Injection via sessionId (CVSS 7.5)
- [CVE-2026-91936](https://cve.now/CVE-2026-91936.md): Flowise before 3.1.4 Script Injection via Docker Workflows (CVSS 6.8)
- [CVE-2026-91935](https://cve.now/CVE-2026-91935.md): Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes (CVSS 8.3)
- [CVE-2026-91934](https://cve.now/CVE-2026-91934.md): Flowise before 3.1.4 Remote Code Execution via SQL Database Chain (CVSS 8.8)
- [CVE-2026-91933](https://cve.now/CVE-2026-91933.md): Flowise before 3.1.4 Authorization Bypass via openai-realtime (CVSS 7.1)
- [CVE-2026-91932](https://cve.now/CVE-2026-91932.md): Flowise before 3.1.4 Remote Code Execution via cwd Parameter (CVSS 8.5)
- [CVE-2026-91931](https://cve.now/CVE-2026-91931.md): Flowise before 3.1.4 Remote Code Execution via Custom MCP npx (CVSS 8.5)
- [CVE-2026-91930](https://cve.now/CVE-2026-91930.md): Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover (CVSS 7.5)
- [CVE-2026-91929](https://cve.now/CVE-2026-91929.md): Flowise before 3.1.4 Cross-Tenant Authorization Bypass (CVSS 7.1)
- [CVE-2026-90580](https://cve.now/CVE-2026-90580.md): FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery (CVSS 5.3)
- [CVE-2026-90535](https://cve.now/CVE-2026-90535.md): Flowise before 3.1.4 Denial of Service via text-to-speech/abort (CVSS 6.3)
- [CVE-2026-90534](https://cve.now/CVE-2026-90534.md): Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method (CVSS 6.1)
- [CVE-2026-90533](https://cve.now/CVE-2026-90533.md): Flowise before 3.1.4 Broken Access Control via organizationuser (CVSS 6.0)
- [CVE-2026-73604](https://cve.now/CVE-2026-73604.md): Flowise before 3.1.3 Credential Exposure via API (CVSS 7.1)
- [CVE-2026-73603](https://cve.now/CVE-2026-73603.md): Flowise before 3.1.4 Credential Abuse via Text-to-Speech (CVSS 6.3)
- [CVE-2026-73602](https://cve.now/CVE-2026-73602.md): Flowise before 3.1.3 Sandbox Escape to RCE (CVSS 9.0)
- [CVE-2026-73601](https://cve.now/CVE-2026-73601.md): Flowise before 3.1.3 Remote Code Execution via Custom MCP (CVSS 9.0)
- [CVE-2026-73488](https://cve.now/CVE-2026-73488.md): Flowise before 3.1.3 IDOR via customer-default-source endpoint (CVSS 6.0)
- [CVE-2026-73487](https://cve.now/CVE-2026-73487.md): Flowise before 3.1.3 Prompt Injection RCE via CSV Agent (CVSS 9.0)
- [CVE-2026-73486](https://cve.now/CVE-2026-73486.md): Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV (CVSS 9.0)
- [CVE-2026-73485](https://cve.now/CVE-2026-73485.md): Flowise before 3.1.3 Remote Code Execution via Airtable Agent (CVSS 9.0)
- [CVE-2026-73484](https://cve.now/CVE-2026-73484.md): Flowise before 3.1.3 Sandbox Escape via Pandas Methods (CVSS 8.6)
- [CVE-2026-73483](https://cve.now/CVE-2026-73483.md): Flowise before 3.1.3 Sandbox Escape via Puppeteer (CVSS 9.4)
- [CVE-2026-71962](https://cve.now/CVE-2026-71962.md): Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download (CVSS 8.7)
- [CVE-2026-67620](https://cve.now/CVE-2026-67620.md): Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List (CVSS 6.3)
- [CVE-2026-70636](https://cve.now/CVE-2026-70636.md): Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint (CVSS 8.7)
- [CVE-2026-67622](https://cve.now/CVE-2026-67622.md): Flowise 3.1.4 IDOR in OpenAI Assistants Integration (CVSS 8.5)
- [CVE-2026-67621](https://cve.now/CVE-2026-67621.md): Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints (CVSS 7.2)
- [CVE-2026-70478](https://cve.now/CVE-2026-70478.md): Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service (CVSS 9.2)
- [CVE-2026-70477](https://cve.now/CVE-2026-70477.md): Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability (CVSS 9.5)
- [CVE-2026-70476](https://cve.now/CVE-2026-70476.md): Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation (CVSS 8.3)
- [CVE-2026-70475](https://cve.now/CVE-2026-70475.md): Flowise: Missing Authorization on Execution Update Endpoint (CVSS 7.1)
- [CVE-2026-70474](https://cve.now/CVE-2026-70474.md): Flowise: Cross-Workspace OAuth2 Credential Metadata Leak (CVSS 7.6)
- [CVE-2026-70473](https://cve.now/CVE-2026-70473.md): Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history (CVSS 8.3)
- [CVE-2026-70472](https://cve.now/CVE-2026-70472.md): Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store (CVSS 7.1)
- [CVE-2026-70471](https://cve.now/CVE-2026-70471.md): Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure (CVSS 7.1)
- [CVE-2026-70470](https://cve.now/CVE-2026-70470.md): Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE (CVSS 9.5)
- [CVE-2026-69264](https://cve.now/CVE-2026-69264.md): Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation (CVSS 9.4)
- [CVE-2026-69263](https://cve.now/CVE-2026-69263.md): Flowise: CVE-2025-8943 Patch Bypass: npm\_config\_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) (CVSS 8.7)
- [CVE-2026-69262](https://cve.now/CVE-2026-69262.md): Flowise: \`DELETE /api/v1/chatflows/:id\` does not validate resource type, allowing \`agentflows:delete\` and \`chatflows:delete\` to delete each other’s flow type (CVSS 7.1)
- [CVE-2026-69259](https://cve.now/CVE-2026-69259.md): Flowise RCE via SQLite Record Manager Node (CVSS 9.4)
- [CVE-2026-69258](https://cve.now/CVE-2026-69258.md): Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated \`overrideConfig\` Spread in Prediction API (CVSS 8.8)
- [CVE-2026-69257](https://cve.now/CVE-2026-69257.md): Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses (CVSS 7.6)
- [CVE-2026-69256](https://cve.now/CVE-2026-69256.md): Flowise: Remote Code Execution Vulnerability in CSVAgent (CVSS 9.4)
- [CVE-2026-69255](https://cve.now/CVE-2026-69255.md): Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified (CVSS 9.2)
- [CVE-2026-69254](https://cve.now/CVE-2026-69254.md): Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override (CVSS 9.4)
- [CVE-2026-69253](https://cve.now/CVE-2026-69253.md): Flowise Sandbox Escape to RCE (CVSS 9.0)
- [CVE-2026-69252](https://cve.now/CVE-2026-69252.md): Flowise: Missing authorization on \`/api/v1/files\` allows low-privileged API keys to list and delete files across workspaces within the same organization (CVSS 7.2)
- [CVE-2026-69251](https://cve.now/CVE-2026-69251.md): Flowise RCE via TypeORM DataSource (CVSS 9.0)
- [CVE-2026-69250](https://cve.now/CVE-2026-69250.md): Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration (CVSS 8.5)
- [CVE-2026-12821](https://cve.now/CVE-2026-12821.md): FlowiseAI Flowise S3 Document Loader S3.ts path traversal (CVSS 5.3)
- [CVE-2026-46480](https://cve.now/CVE-2026-46480.md): Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover (CVSS 7.7)
- [CVE-2026-46479](https://cve.now/CVE-2026-46479.md): Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover (CVSS 7.7)
- [CVE-2026-46478](https://cve.now/CVE-2026-46478.md): Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover (CVSS 7.7)
- [CVE-2026-46477](https://cve.now/CVE-2026-46477.md): Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover (CVSS 7.7)
- [CVE-2026-46476](https://cve.now/CVE-2026-46476.md): Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover (CVSS 7.7)
- [CVE-2026-46475](https://cve.now/CVE-2026-46475.md): Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover (CVSS 7.7)
- [CVE-2026-46443](https://cve.now/CVE-2026-46443.md): Flowise: Credential Data Leak (CVSS 7.0)
- [CVE-2026-46442](https://cve.now/CVE-2026-46442.md): Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape (CVSS 9.4)
- [CVE-2026-46441](https://cve.now/CVE-2026-46441.md): Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment (CVSS 7.6)
- [CVE-2026-46440](https://cve.now/CVE-2026-46440.md): Flowise: Basic Auth Credentials Exposed via API (CVSS 7.5)
- [CVE-2026-42863](https://cve.now/CVE-2026-42863.md): Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment (CVSS 7.6)
- [CVE-2026-42862](https://cve.now/CVE-2026-42862.md): Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment (CVSS 7.6)
- [CVE-2026-42861](https://cve.now/CVE-2026-42861.md): Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment (CVSS 7.6)
- [CVE-2026-46444](https://cve.now/CVE-2026-46444.md): Flowise: Vector Store No Permission Checks (CVSS 8.7)
- [CVE-2026-43995](https://cve.now/CVE-2026-43995.md): Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) (CVSS 5.3)
- [CVE-2026-8028](https://cve.now/CVE-2026-8028.md): FlowiseAI Flowise Endpoint account.service.ts verify information disclosure (CVSS 6.3)
- [CVE-2026-8027](https://cve.now/CVE-2026-8027.md): FlowiseAI Flowise User Controller authorization (CVSS 5.3)
- [CVE-2026-8026](https://cve.now/CVE-2026-8026.md): FlowiseAI Flowise API Response account.service.ts login information disclosure (CVSS 6.3)
- [CVE-2026-41274](https://cve.now/CVE-2026-41274.md): Flowise: Cypher Injection in GraphCypherQAChain (CVSS 9.3)
- [CVE-2026-41264](https://cve.now/CVE-2026-41264.md): Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability (CVSS 9.2)
- [CVE-2026-41265](https://cve.now/CVE-2026-41265.md): Flowise: Airtable\_Agent Code Injection Remote Code Execution Vulnerability (CVSS 9.2)
- [CVE-2026-41279](https://cve.now/CVE-2026-41279.md): Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials (CVSS 8.2)
- [CVE-2026-41278](https://cve.now/CVE-2026-41278.md): Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs (CVSS 8.7)
- [CVE-2026-41276](https://cve.now/CVE-2026-41276.md): Flowise: AccountService resetPassword Authentication Bypass Vulnerability (CVSS 7.7)
- [CVE-2026-41277](https://cve.now/CVE-2026-41277.md): Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) (CVSS 7.6)
- [CVE-2026-41275](https://cve.now/CVE-2026-41275.md): Flowise: Password Reset Link Sent Over Unsecured HTTP (CVSS 7.5)
- [CVE-2026-41273](https://cve.now/CVE-2026-41273.md): Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow (CVSS 7.7)
- [CVE-2026-41271](https://cve.now/CVE-2026-41271.md): Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains (CVSS 7.1)
- [CVE-2026-41272](https://cve.now/CVE-2026-41272.md): Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) (CVSS 7.1)
- [CVE-2026-41270](https://cve.now/CVE-2026-41270.md): Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox (CVSS 7.1)
- [CVE-2026-41269](https://cve.now/CVE-2026-41269.md): Flowise: File Upload Validation Bypass in createAttachment (CVSS 7.1)
- [CVE-2026-41268](https://cve.now/CVE-2026-41268.md): Flowise: Flowise Parameter Override Bypass Remote Command Execution (CVSS 7.7)
- [CVE-2026-41267](https://cve.now/CVE-2026-41267.md): Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association (CVSS 8.1)
- [CVE-2026-41266](https://cve.now/CVE-2026-41266.md): Flowise: Sensitive Data Leak in public-chatbotConfig (CVSS 7.7)
- [CVE-2026-41137](https://cve.now/CVE-2026-41137.md): Flowise: Code Injection in CSVAgent leads to Authenticated RCE (CVSS 9.4)
- [CVE-2026-41138](https://cve.now/CVE-2026-41138.md): Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas. (CVSS 8.3)
- [CVE-2026-40933](https://cve.now/CVE-2026-40933.md): Flowise: Authenticated RCE Via MCP Adapters (CVSS 10.0)
- [CVE-2026-31829](https://cve.now/CVE-2026-31829.md): Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access (CVSS 7.1)
- [CVE-2026-30824](https://cve.now/CVE-2026-30824.md): Flowise: Missing Authentication on NVIDIA NIM Endpoints (CVSS 7.7)
- [CVE-2026-30823](https://cve.now/CVE-2026-30823.md): Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration (CVSS 8.8)
- [CVE-2026-30822](https://cve.now/CVE-2026-30822.md): Flowise: Mass Assignment in \`/api/v1/leads\` Endpoint (CVSS 7.7)
- [CVE-2026-30821](https://cve.now/CVE-2026-30821.md): Flowise: Arbitrary File Upload via MIME Spoofing (CVSS 8.2)
- [CVE-2026-30820](https://cve.now/CVE-2026-30820.md): Flowise Authorization Bypass via Spoofed x-request-from Header (CVSS 8.7)
- [CVE-2025-34267](https://cve.now/CVE-2025-34267.md): Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages (CVSS 8.4)
- [CVE-2025-61913](https://cve.now/CVE-2025-61913.md): Flowise is vulnerable to arbitrary file read, arbitrary file write (CVSS 10.0)
- [CVE-2025-61687](https://cve.now/CVE-2025-61687.md): FlowiseAI/Flosise has File Upload vulnerability (CVSS 8.3)
- [CVE-2025-50538](https://cve.now/CVE-2025-50538.md): Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log. (CVSS 8.2)
- [CVE-2025-29192](https://cve.now/CVE-2025-29192.md): Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log. (CVSS 8.2)
- [CVE-2025-59528](https://cve.now/CVE-2025-59528.md): Flowise has Remote Code Execution vulnerability (CVSS 10.0)
- [CVE-2025-59527](https://cve.now/CVE-2025-59527.md): FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability (CVSS 7.5)
- [CVE-2025-59434](https://cve.now/CVE-2025-59434.md): Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function (CVSS 9.6)
- [CVE-2025-58434](https://cve.now/CVE-2025-58434.md): Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover (CVSS 9.8)
- [CVE-2024-9148](https://cve.now/CVE-2024-9148.md): Flowise Stored Cross-Site Scripting (CVSS 9.6)
- [CVE-2024-8181](https://cve.now/CVE-2024-8181.md): Flowise Authentication Bypass (CVSS 9.8)
- [CVE-2024-8182](https://cve.now/CVE-2024-8182.md): Flowise Denial of Service (CVSS 7.5)
- [CVE-2024-37146](https://cve.now/CVE-2024-37146.md): GHSL-2023-248: Flowise xss in /api/v1/credentials/id (CVSS 6.1)
- [CVE-2024-37145](https://cve.now/CVE-2024-37145.md): GHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/id (CVSS 6.1)
- [CVE-2024-36423](https://cve.now/CVE-2024-36423.md): GHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id (CVSS 6.1)
- [CVE-2024-36422](https://cve.now/CVE-2024-36422.md): GHSL-2023-245: Flowise xss in api/v1/chatflows/id (CVSS 6.1)
- [CVE-2024-36421](https://cve.now/CVE-2024-36421.md): GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts (CVSS 7.5)
- [CVE-2024-36420](https://cve.now/CVE-2024-36420.md): GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/flowiseai
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.