Lucene search
+L

4689 matches found

Cvelist
Cvelist
added 2 days ago38 views

CVE-2026-70472 Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-store endpoints accept a client-controlled credential parameter and load credentials by id without checking whether that credential belongs to the caller...

7.1CVSS0.00246EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2 days ago34 views

CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetche...

7.1CVSS0.00279EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago23 views

CVE-2026-70471

CVE-2026-70471 – Flowise RBAC bypass : Prior to Flowise 3.1.3, unauthorized users (including keys) could access workspace-scoped variables via /api/v1/node-custom-function because $vars were injected into the code sandbox without requiring variables:view, bypassing the Variables API. Variables fo...

7.1CVSS6.1AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago8 views

CVE-2026-69262

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, DELETE /api/v1/chatflows/:id authorized requests with checkAnyPermission'chatflows:delete,agentflows:delete', so possession of either permission was sufficient to reach the delete path. The...

7.1CVSS0.00246EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2 days ago9 views

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

summary: In Flowise, DELETE /api/v1/chatflows/:id authorizes requests with checkAnyPermission'chatflows:delete,agentflows:delete'. Possession of either permission is sufficient to reach the delete path. The delete logic does not validate the target resource type, allowing a caller with only...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2 days ago18 views

CVE-2026-69262

Flowise prior to 3.1.3 has an access control flaw in DELETE /api/v1/chatflows/:id: possession of either chatflows:delete or agentflows:delete allowed access to the delete path, but the target resource type was not validated. The delete logic resolved the record only by id and workspaceId, permitt...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References4
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-52794

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, DELETE /api/v1/chatflows/:id authorized requests with checkAnyPermission'chatflows:delete,agentflows:delete', so possession of either permission was sufficient to reach the delete path. The...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2 days ago5 views

CVE-2026-69262

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, DELETE /api/v1/chatflows/:id authorized requests with checkAnyPermission'chatflows:delete,agentflows:delete', so possession of either permission was sufficient to reach the delete path. The...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2 days ago10 views

CVE-2026-69252

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...

7.2CVSS0.0026EPSS
SaveExploits0References4
EUVD
EUVD
added 2 days ago5 views

EUVD-2026-52726

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...

7.2CVSS5.5AI score0.0026EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago24 views

CVE-2026-69252

Flowise CVE-2026-69252: Before 3.1.3, the /api/v1/files route was protected only by feat:files and did not enforce checkPermission on GET/DELETE. A low-privileged, authenticated API key could list files under the organization root and delete files in other workspaces within the same organization ...

7.2CVSS5.5AI score0.0026EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2 days ago32 views

CVE-2026-69252 Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...

7.2CVSS0.0026EPSS
SaveExploits0References4
Nuclei
Nuclei
added 5 days ago28 views

VMware Workspace ONE Access - Authentication Bypass

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework. id: CVE-2022-22956...

9.8CVSS8AI score0.50694EPSS
SaveExploits5References4
EUVD
EUVD
added 6 days ago13 views

EUVD-2026-51485

Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This mean...

6.8CVSS5.5AI score0.00199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 6 days ago14 views

PT-2026-66727

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description Keycloak allows authentication via Google accounts and can be restricted to specific Google Workspace domains. A flaw exists in the token exchange feature, which enables the swapping of a...

6.8CVSS5.5AI score0.00199EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/07/30 4:46 p.m.7 views

SUSE CVE-2026-45796

Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3 are vulnerable to unauthenticated semi-blind Server-Side Request Forgery SSRF via the Azure instance identity endpoint POST...

6.5CVSS7.8AI score0.00335EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/30 4:40 p.m.6 views

SUSE CVE-2026-54066

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

7.5CVSS7.9AI score0.01892EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/30 4:40 p.m.6 views

SUSE CVE-2026-54067

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, CSS snippet body containing breaks out of its surrounding tag when renderSnippet interpolates it via insertAdjacentHTML. A payload like runs arbitrary JavaScript in the renderer. On Electron desktop builds the renderer...

9.9CVSS7.8AI score0.00307EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/30 4:39 p.m.6 views

SUSE CVE-2026-55429

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, UpsertWorkspaceApp overwrites an existing app's agentid on a primary-key conflict and insertAgentApp accepts the app ID from the provisioner's CompleteJob...

8.7CVSS7.8AI score0.00287EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/30 4:39 p.m.6 views

SUSE CVE-2026-55430

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the workspace app proxy resolves the target app from httpapi.RequestHost which prefers the X-Forwarded-Host header over the real Host header. No middleware...

6.8CVSS7.7AI score0.0014EPSS
SaveExploits0References2
Rows per page
Query Builder