{"id":"CVE-2025-29189","aliases":["EUVD-2025-10669","GHSA-gjx9-wg9x-7gvp"],"status":"published","title":"Flowise Vulnerable to SQL Injection via `tableName` Parameter","description":"Flowise \u003c= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00323,"percentile":0.25504,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2025-04-09T00:00:00Z","modified":"2026-10-28T02:31:05Z","fixes":[{"ecosystem":"npm","package":"flowise-components","fixed_in":["2.2.4"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"flowise-components","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.2.3"},{"fixed":"2.2.4"}]}]},{"source":"osv","ecosystem":"npm","package":"flowise-components","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.2.4"}]}]}],"products":[{"vendor":"flowiseai","product":"flowise"}],"references":[{"url":"https://drive.google.com/file/d/1WHPslTmQmAM9xPJifULS2qAo7hcidB4L/view?usp=sharing","tags":["exploit","Exploit","Issue Tracking","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29189","tags":["advisory"]},{"url":"https://github.com/FlowiseAI/Flowise/pull/3818","tags":["web"]},{"url":"https://github.com/FlowiseAI/Flowise/commit/9a417bdc95f58d6dd92cbf60dad42414aba34754","tags":["web"]},{"url":"https://github.com/advisories/GHSA-gjx9-wg9x-7gvp"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29189.json","tags":["advisory"]},{"url":"https://github.com/FlowiseAI/Flowise","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-29189","description":"Flowise \u003c= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","status":"published","published":"2025-04-09T00:00:00Z","modified":"2025-04-09T14:42:51.359Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:45.797843Z"}],"euvd":[{"id":"EUVD-2025-10669","description":"Flowise \u003c= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","status":"published","published":"2025-04-09T00:00:00Z","modified":"2025-04-09T14:42:51Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T20:52:38.716764Z"}],"ghsa":[{"id":"GHSA-gjx9-wg9x-7gvp","title":"Flowise Vulnerable to SQL Injection via `tableName` Parameter","description":"Flowise \u003c= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","status":"published","published":"2025-04-09T12:30:24Z","modified":"2025-04-10T14:18:52Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:38:38.344711Z"}],"nvd":[{"id":"CVE-2025-29189","description":"Flowise \u003c= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","status":"published","published":"2025-04-09T12:15:15.003Z","modified":"2026-10-05T15:10:00.59Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:00.087098Z"}],"osv":[{"id":"CVE-2025-29189","description":"Flowise \u003c= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","status":"published","published":"2025-04-09T00:00:00Z","modified":"2026-10-28T02:31:05.587472739Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:44:47.708311Z"},{"id":"GHSA-gjx9-wg9x-7gvp","title":"Flowise Vulnerable to SQL Injection via `tableName` Parameter","description":"Flowise \u003c= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","status":"published","published":"2025-04-09T12:30:24Z","modified":"2025-04-10T14:57:09.650327Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:47.822182Z"}]}}