1 matches found
CVE-2026-69262: Incorrect Authorization
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, DELETE /api/v1/chatflows/:id authorized requests with checkAnyPermission'chatflows:delete,agentflows:delete', so possession of either permission was sufficient to reach the delete path. The...
8.1CVSS5.9AI score0.00524EPSS
SaveExploits1References7
20