Flowise-CVE-2026-58057-exploit

Flowise CVE-2026-58057 - Exploit de ejecución remota de código en Windows -orange?style=f...

CVE-2026-67620-poc

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

flowise-arbitrary-file-read-getFileFromStorage

Lectura arbitraria de archivos no autenticada en Flowise getFileFromStorage — nueva CVE propuesta Una vulnerabilidad independiente de CVE-2025-71338 que es el sumidero de escritura. Se trata de una lectura arbitraria de archivos no autenticada en la ruta de "rehydrate" del cargador de...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses...

CVE-2025-58434-PoC

CVE-2025-58434-PoC Este repositorio contiene un script de Python de Prueba de Concepto PoC para CVE-2025-58434, que permite a los atacantes cambiar las contraseñas de otros usuarios sin proceso de autenticación en flowise versión 3.0.5 e inferior debido a la fuga de tokens. Uso Para ejecutar el...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Exploit chain for two vulnerabilities affecting Flowise = 3.0.5. Vulnerabilities CVE-2025-58434 — Unauthenticated Account Takeover The forgot-password endpoint returns a valid password reset token in the API response without requiring authentication. An attacker wi...

CVE-2026-67620-poc — Updated!

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

CVE-2025-59528

CVE-2025-59528 Proof of Concept English version PoC minimaliste et orienté validation technique de la vulnérabilité sur un environnement autorisé. Prerequis Avoir un compte utilisateur sur le dashboard Flowise cible. Disposer d'une clef API valide associee a ce compte. Demarrer un listener sur ta...

CVE-2026-73488

creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:25+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-73604

creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:23+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-73603

creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:21+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-73484

creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:05+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-73602

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73601

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOMMCPPROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and...

CVE-2026-73603

Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to abuse private chatflow TTS credentials. Unauthenticated attackers can generate unlimited text-to-speech audio using stored OpenAI or ElevenLabs API keys by providing a...

CVE-2026-73487

Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.readjson to exfiltrate datasets, perform SSRF...

CVE-2026-73488

Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can...

CVE-2026-73604

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded...

CVE-2026-73483

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

CVE-2026-73484

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like tocsv, tojson, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesyste...