Flowiseai vulnerabilities
120 CVEs and advisories name Flowiseai as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-73483Flowise before 3.1.3 Sandbox Escape via Puppeteer
- CVE-2026-71962Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download
- CVE-2026-67620Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List
- CVE-2026-70636Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint
- CVE-2026-67622Flowise 3.1.4 IDOR in OpenAI Assistants Integration
- CVE-2026-67621Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints
- CVE-2026-70478Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
- CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
- CVE-2026-70476Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
- CVE-2026-70475Flowise: Missing Authorization on Execution Update Endpoint
- CVE-2026-70474Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
- CVE-2026-70473Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
- CVE-2026-70472Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
- CVE-2026-70471Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
- CVE-2026-70470Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
- CVE-2026-69264Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
- CVE-2026-69263Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
- CVE-2026-69262Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
- CVE-2026-69259Flowise RCE via SQLite Record Manager Node
- CVE-2026-69258Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
- CVE-2026-69257Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
- CVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgent
- CVE-2026-69255Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
- CVE-2026-69254Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
- CVE-2026-69253Flowise Sandbox Escape to RCE
- CVE-2026-69252Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
- CVE-2026-69251Flowise RCE via TypeORM DataSource
- CVE-2026-69250Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
- CVE-2026-12821FlowiseAI Flowise S3 Document Loader S3.ts path traversal
- CVE-2026-46480Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover