Flowiseai Flowise vulnerabilities

• flowiseai flowise Flowise through 3.1.4 Missing Authorization via upsert-history CVE-2026-100610 7.7 HighSeptember 26, 2026
• flowiseai flowise Flowise through 3.1.4 Insecure Direct Object Reference via Credential CVE-2026-100609 7.6 HighSeptember 26, 2026
• flowiseai flowise Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard CVE-2026-100608 8.7 HighSeptember 26, 2026
• flowiseai flowise Flowise through 3.1.4 Authentication Bypass via Email-Only SSO CVE-2026-100607 9.2 CriticalSeptember 26, 2026
• flowiseai flowise Flowise through 3.1.4 Authentication Bypass via SSO Email Match CVE-2026-100606 9.2 CriticalSeptember 26, 2026
• flowiseai flowise Flowise through 3.1.4 Missing Authorization via Chat Message Routes CVE-2026-100605 7.5 HighSeptember 26, 2026
• flowiseai flowise Flowise before 3.1.4 Server-Side Request Forgery via document loaders CVE-2026-91938 7.6 HighSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 NoSQL Injection via sessionId CVE-2026-91937 8.7 HighSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 Script Injection via Docker Workflows CVE-2026-91936 8.3 HighSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes CVE-2026-91935 8.7 HighSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 Remote Code Execution via SQL Database Chain CVE-2026-91934 8.7 HighSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 Authorization Bypass via openai-realtime CVE-2026-91933 7.6 HighSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 Remote Code Execution via cwd Parameter CVE-2026-91932 9.0 CriticalSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 Remote Code Execution via Custom MCP npx CVE-2026-91931 9.0 CriticalSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover CVE-2026-91930 7.7 HighSeptember 15, 2026
• flowiseai flowise Flowise before 3.1.4 Cross-Tenant Authorization Bypass CVE-2026-91929 7.6 HighSeptember 15, 2026
• flowiseai flowise FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery CVE-2026-90580 5.3 MediumSeptember 13, 2026
• flowiseai flowise Flowise before 3.1.4 Denial of Service via text-to-speech/abort CVE-2026-90535 6.3 MediumSeptember 12, 2026
• flowiseai flowise Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method CVE-2026-90534 6.1 MediumSeptember 12, 2026
• flowiseai flowise Flowise before 3.1.4 Broken Access Control via organizationuser CVE-2026-90533 6.0 MediumSeptember 12, 2026
• flowiseai flowise An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1... CVE-2026-52098 9.8 CriticalSeptember 10, 2026
• flowiseai flowise Flowise before 3.1.3 Sandbox Escape to RCE CVE-2026-73602 9.0 CriticalAugust 13, 2026
• flowiseai flowise Flowise before 3.1.3 Remote Code Execution via Custom MCP CVE-2026-73601 9.0 CriticalAugust 13, 2026
• flowiseai flowise Flowise before 3.1.3 Prompt Injection RCE via CSV Agent CVE-2026-73487 Fix available 9.0 CriticalAugust 13, 2026
• flowiseai flowise Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV CVE-2026-73486 9.0 CriticalAugust 13, 2026
• flowiseai flowise Flowise before 3.1.3 Remote Code Execution via Airtable Agent CVE-2026-73485 9.0 CriticalAugust 13, 2026
• flowiseai flowise Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore CVE-2026-119978 9.0 CriticalAugust 13, 2026
• flowiseai flowise Flowise before 3.1.3 Sandbox Escape via Pandas Methods CVE-2026-73484 8.6 HighAugust 13, 2026
• flowiseai flowise Flowise before 3.1.3 Sandbox Escape via Puppeteer CVE-2026-73483 Fix available 9.4 CriticalAugust 13, 2026
• flowiseai flowise Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download CVE-2026-71962 8.7 HighAugust 10, 2026
• flowiseai flowise Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List CVE-2026-67620 Public exploit 6.3 MediumAugust 8, 2026
• flowiseai flowise Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint CVE-2026-70636 8.7 HighAugust 6, 2026
• flowiseai flowise Flowise 3.1.4 IDOR in OpenAI Assistants Integration CVE-2026-67622 8.5 HighAugust 6, 2026
• flowiseai flowise Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints CVE-2026-67621 7.2 HighAugust 6, 2026
• flowiseai flowise Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service CVE-2026-70478 Fix available 9.2 CriticalAugust 4, 2026
• flowiseai flowise Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability CVE-2026-70477 Fix available 9.5 CriticalAugust 4, 2026
• flowiseai flowise Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation CVE-2026-70476 Fix available 8.3 HighAugust 4, 2026
• flowiseai flowise Flowise before 3.1.4 Credential Abuse via Text-to-Speech CVE-2026-73603 Fix available 6.3 MediumAugust 4, 2026
• flowiseai flowise Flowise: Missing Authorization on Execution Update Endpoint CVE-2026-70475 Fix available 7.1 HighAugust 4, 2026
• flowiseai flowise Flowise: Cross-Workspace OAuth2 Credential Metadata Leak CVE-2026-70474 Fix available 7.6 HighAugust 4, 2026
• flowiseai flowise Flowise before 3.1.3 Credential Exposure via API CVE-2026-73604 Fix available 7.1 HighAugust 4, 2026
• flowiseai flowise Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history CVE-2026-70473 Fix available 8.3 HighAugust 4, 2026
• flowiseai flowise Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store CVE-2026-70472 Fix available 7.1 HighAugust 4, 2026
• flowiseai flowise Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure CVE-2026-70471 Fix available 7.1 HighAugust 4, 2026
• flowiseai flowise Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE CVE-2026-70470 Fix available 9.5 CriticalAugust 4, 2026
• flowiseai flowise Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation CVE-2026-69264 Fix available 9.4 CriticalAugust 4, 2026
• flowiseai flowise Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) CVE-2026-69263 Public exploitFix available 8.7 HighAugust 4, 2026
• flowiseai flowise Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type CVE-2026-69262 Fix available 7.1 HighAugust 4, 2026
• flowiseai flowise Flowise RCE via SQLite Record Manager Node CVE-2026-69259 Fix available 9.4 CriticalAugust 4, 2026
• flowiseai flowise Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API CVE-2026-69258 Fix available 8.8 HighAugust 4, 2026
• Show olderLoading…