CVE-2026-73604

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded passwords, cloud service account JSON with private keys, and API keys by calling this endpoint.

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded passwords, cloud service account JSON with private keys, and API keys by calling this endpoint.

Summary

The GET /api/v1/credentials/:id endpoint decrypts stored credential data and returns it in the plainDataObj field of the API response. While a redactCredentialWithPasswordType() function masks fields defined with type: 'password' in their component schema, many credential types store highly sensitive data (database connection URLs with embedded passwords, Google service account JSON with RSA private keys, AWS access keys) in fields defined as type: 'string'. These string-type fields are returned in full plaintext without any redaction.

Any authenticated user with credentials:view permission can retrieve the raw secrets of any credential in their workspace by calling this endpoint.

Vulnerable Code

Service Layer

packages/server/src/services/credentials/index.ts, getCredentialById() (line 127):

At line 138, the credential's encrypted data is decrypted:

const decryptedCredentialData = await decryptCredentialData(
    credential.encryptedData,
    credential.credentialName,
    appServer.nodesPool.componentCredentials
)

At lines 143-146, the decrypted data is attached to the response as plainDataObj:

const returnCredential: ICredentialReturnResponse = {
    ...credential,
    plainDataObj: decryptedCredentialData    // <-- decrypted secrets in response
}

At line 147, only encryptedData is stripped, leaving plainDataObj intact:

const dbResponse: any = omit(returnCredential, ['encryptedData'])

Incomplete Redaction

packages/server/src/utils/index.ts, redactCredentialWithPasswordType() (line 1697):

export const redactCredentialWithPasswordType = (
    componentCredentialName: string,
    decryptedCredentialObj: ICredentialDataDecrypted,
    componentCredentials: IComponentCredentials
): ICredentialDataDecrypted => {
    const plainDataObj = cloneDeep(decryptedCredentialObj)
    for (const cred in plainDataObj) {
        const inputParam = componentCredentials[componentCredentialName].inputs?.find(
            (inp) => inp.type === 'password' && inp.name === cred  // <-- only 'password' type
        )
        if (inputParam) {
            plainDataObj[cred] = REDACTED_CREDENTIAL_VALUE
        }
    }
    return plainDataObj
}

This function only redacts fields where inp.type === 'password'. Fields with type: 'string' are returned verbatim, even when they contain secrets.

Credential Definitions Storing Secrets in String-Type Fields

| Credential | Field | Type | Contains | |---|---|---|---| | mongoDBUrlApi | mongoDBConnectUrl | string | mongodb+srv://user:password@host/db | | googleVertexAuth | googleApplicationCredential | string | Full service account JSON with RSA private key | | postgresUrl | postgresUrl | string | postgresql://user:password@host/db | | redisCacheUrlApi | redisUrl | string | redis://user:password@host:port | | awsApi | awsKey | string | AWS Access Key ID | | langfuseApi | langFusePublicKey | string | Langfuse API public key | | httpBasicAuth | basicAuthUsername | string | HTTP Basic Auth username |

There are 60+ credential definitions in packages/components/credentials/, many with sensitive string-type fields.

Proof of Concept

Environment

• Flowise v3.0.13 (flowiseai/flowise:latest Docker image)
• Authenticated as admin user via enterprise auth

Steps to Reproduce

1. Start Flowise and log in as any user with credentials:view permission.
2. Create a MongoDB credential with a connection URL containing embedded credentials:

curl -X POST "http://TARGET:3000/api/v1/credentials" \
  -H "Content-Type: application/json" \
  -H "x-request-from: internal" \
  -H "Cookie: token=<jwt-token>" \
  -d '{
    "name": "MongoDB Production",
    "credentialName": "mongoDBUrlApi",
    "plainDataObj": {
      "mongoDBConnectUrl":…

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded passwords, cloud service account JSON with private keys, and API keys by calling this endpoint.

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded passwords, cloud service account JSON with private keys, and API keys by calling this endpoint.

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded passwords, cloud service account JSON with private keys, and API keys by calling this endpoint.

Summary

The GET /api/v1/credentials/:id endpoint decrypts stored credential data and returns it in the plainDataObj field of the API response. While a redactCredentialWithPasswordType() function masks fields defined with type: 'password' in their component schema, many credential types store highly sensitive data (database connection URLs with embedded passwords, Google service account JSON with RSA private keys, AWS access keys) in fields defined as type: 'string'. These string-type fields are returned in full plaintext without any redaction.

Any authenticated user with credentials:view permission can retrieve the raw secrets of any credential in their workspace by calling this endpoint.

Vulnerable Code

Service Layer

packages/server/src/services/credentials/index.ts, getCredentialById() (line 127):

At line 138, the credential's encrypted data is decrypted:

const decryptedCredentialData = await decryptCredentialData(
    credential.encryptedData,
    credential.credentialName,
    appServer.nodesPool.componentCredentials
)

At lines 143-146, the decrypted data is attached to the response as plainDataObj:

const returnCredential: ICredentialReturnResponse = {
    ...credential,
    plainDataObj: decryptedCredentialData    // <-- decrypted secrets in response
}

At line 147, only encryptedData is stripped, leaving plainDataObj intact:

const dbResponse: any = omit(returnCredential, ['encryptedData'])

Incomplete Redaction

packages/server/src/utils/index.ts, redactCredentialWithPasswordType() (line 1697):

export const redactCredentialWithPasswordType = (
    componentCredentialName: string,
    decryptedCredentialObj: ICredentialDataDecrypted,
    componentCredentials: IComponentCredentials
): ICredentialDataDecrypted => {
    const plainDataObj = cloneDeep(decryptedCredentialObj)
    for (const cred in plainDataObj) {
        const inputParam = componentCredentials[componentCredentialName].inputs?.find(
            (inp) => inp.type === 'password' && inp.name === cred  // <-- only 'password' type
        )
        if (inputParam) {
            plainDataObj[cred] = REDACTED_CREDENTIAL_VALUE
        }
    }
    return plainDataObj
}

This function only redacts fields where inp.type === 'password'. Fields with type: 'string' are returned verbatim, even when they contain secrets.

Credential Definitions Storing Secrets in String-Type Fields

| Credential | Field | Type | Contains | |---|---|---|---| | mongoDBUrlApi | mongoDBConnectUrl | string | mongodb+srv://user:password@host/db | | googleVertexAuth | googleApplicationCredential | string | Full service account JSON with RSA private key | | postgresUrl | postgresUrl | string | postgresql://user:password@host/db | | redisCacheUrlApi | redisUrl | string | redis://user:password@host:port | | awsApi | awsKey | string | AWS Access Key ID | | langfuseApi | langFusePublicKey | string | Langfuse API public key | | httpBasicAuth | basicAuthUsername | string | HTTP Basic Auth username |

There are 60+ credential definitions in packages/components/credentials/, many with sensitive string-type fields.

Proof of Concept

Environment

• Flowise v3.0.13 (flowiseai/flowise:latest Docker image)
• Authenticated as admin user via enterprise auth

Steps to Reproduce

1. Start Flowise and log in as any user with credentials:view permission.
2. Create a MongoDB credential with a connection URL containing embedded credentials:

curl -X POST "http://TARGET:3000/api/v1/credentials" \
  -H "Content-Type: application/json" \
  -H "x-request-from: internal" \
  -H "Cookie: token=<jwt-token>" \
  -d '{
    "name": "MongoDB Production",
    "credentialName": "mongoDBUrlApi",
    "plainDataObj": {
      "mongoDBConnectUrl":…