flowise vulnerabilities (npm)
115 vulnerabilities.
-
flowisenpm Flowise before 3.1.3 Prompt Injection RCE via CSV Agent 9.0 Critical -
flowisenpm Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore 9.0 Critical -
flowisenpm Flowise before 3.1.3 Sandbox Escape via Puppeteer 9.4 Critical -
flowisenpm Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service 9.2 Critical -
flowisenpm Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability 9.5 Critical -
flowisenpm Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation 8.3 High -
flowisenpm Flowise before 3.1.4 Credential Abuse via Text-to-Speech 6.3 Medium -
flowisenpm Flowise: Missing Authorization on Execution Update Endpoint 7.1 High -
flowisenpm Flowise: Cross-Workspace OAuth2 Credential Metadata Leak 7.6 High -
flowisenpm Flowise before 3.1.3 Credential Exposure via API 7.1 High -
flowisenpm Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history 8.3 High -
flowisenpm Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store 7.1 High -
flowisenpm Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys 7.2 High -
flowisenpm Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure 7.1 High -
flowisenpm Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE 9.5 Critical -
flowisenpm Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation 9.4 Critical -
flowisenpm Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) 8.7 High -
flowisenpm Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type 7.1 High -
flowisenpm Flowise RCE via SQLite Record Manager Node 9.4 Critical -
flowisenpm Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API 8.8 High -
flowisenpm Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses 7.6 High -
flowisenpm Flowise: Remote Code Execution Vulnerability in CSVAgent 9.4 Critical -
flowisenpm Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified 9.2 Critical -
flowisenpm Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override 9.4 Critical -
flowisenpm Flowise Sandbox Escape to RCE 9.0 Critical -
flowisenpm Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization 7.2 High -
flowisenpm Flowise RCE via TypeORM DataSource 9.0 Critical -
flowisenpm Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration 8.5 High -
flowisenpm Flowise before 3.1.3 IDOR via customer-default-source endpoint 6.0 Medium -
flowisenpm Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint 5.3 Medium -
flowisenpm Flowise - Mass Assignment in PUT /api/v1/user Allows Password Hash Override 6.0 Medium -
flowisenpm Flowise - Hardcoded CORS Wildcard in TTS Endpoint 6.9 Medium -
flowisenpm Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover 7.7 High -
flowisenpm Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover 7.7 High -
flowisenpm Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover 7.7 High -
flowisenpm Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover 7.7 High -
flowisenpm Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover 7.7 High -
flowisenpm Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover 7.7 High -
flowisenpm Flowise: Vector Store No Permission Checks 8.7 High -
flowisenpm Flowise: Credential Data Leak 7.0 High -
flowisenpm Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape 9.4 Critical -
flowisenpm Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment 7.6 High -
flowisenpm Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess 8.7 High -
flowisenpm Flowise: Basic Auth Credentials Exposed via API 7.5 High -
flowisenpm Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment 7.6 High -
flowisenpm Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment 7.6 High -
flowisenpm Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment 7.6 High -
flowisenpm FlowiseAI Flowise API Response account.service.ts login information disclosure 6.3 Medium -
flowisenpm Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability 9.2 Critical -
flowisenpm Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability 9.2 Critical - Show olderLoading…