CVE-2026-90535

Flowise versions prior to 3.1.4 are affected by an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint. The root cause is the absence of ownership verification on the user-supplied chatflowId and chatId parameters, allowing an attacker to terminate active ...

CVE-2026-90534

Flowise , a low-code platform for building LLM applications, is affected by a Cross-Workspace Credential IDOR in the POST /api/v1/node-load-method/:name endpoint through version 3.1.3 . The endpoint lacks route-level permission checks and resolves credentials by raw Credential.id via getCredentia...

CVE-2026-90533

Flowise before 3.1.4 is affected by a broken access control vulnerability in the GET /api/v1/organizationuser endpoint. Any authenticated organization member can query the endpoint with an arbitrary user ID to retrieve the organization owner's full user record, including the bcrypt password hash ...

Flowise 1.4.3 - Arbitrary File Read

Flowise 1.4.3 contains a path traversal caused by lack of sanitization of 'fileName' parameter in /api/v1/openai-assistants-file endpoint in index.ts, letting attackers read arbitrary files, exploit requires attacker to send crafted request. id: CVE-2024-36420 info: name: Flowise 1.4.3 - Arbitrar...

Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure

Flowise before 3.1.0 contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint, allowing unauthenticated remote attackers to retrieve an organization's complete SSO configuration including OAuth client secrets by providing an organizationId parameter. id: CVE-2026-56270...

Flowise - Path Traversal

Flowise = 2.2.8 contains a path traversal vulnerability caused by missing validation of chatflowId and chatId parameters in file handling, letting unauthenticated attackers read and write arbitrary files, exploit requires no authentication. id: CVE-2025-71334 info: name: Flowise - Path Traversal...

Flowise < 3.0.1 - Remote Command Execution

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...

Flowise - Path Traversal

Flowise 3.0.6 contains a path traversal vulnerability caused by improper validation of the chatId parameter in /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints, letting unauthenticated attackers read arbitrary files including sensitive database files. id: CVE-2025-713...

Flowise <= 3.0.5 - Account Takeover

Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts. id: CVE-2025-58434 info: name: Flowise = 3.0.5 - Account Takeover author:...

Flowise < 3.1.3 - Remote Code Execution

Flowise prior to 3.1.3 contains a remote code execution vulnerability caused by allowing authenticated users to set arbitrary TypeORM DataSource options including entities that load local JavaScript files, letting authenticated users execute arbitrary code on the server, exploit requires user...

CVE-2025-58434-AND-59528-POC

Flowise 双重 CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ 仅用于教育和授权的安全研究。 针对你不拥有或未经书面许可测试的系统运行此工具是非法的 。 目录 概述 漏洞详情 CVE-2025-58434 — 账户接管 CVE-2025-59528 — 远程代码执行 完整攻击链 受影响版本 仓库结构 环境要求 安装 使用说明...

CVE-2026-69263

CVE 2026-69263 Qué CVE 2026-69263 es un bypass del parche de la antigua vulnerabilidad RCE parcheada en agosto de 2025. El parche introdujo una denylist que bloqueaba la instalación de paquetes arbitrarios. Cómo Dado que npm lee la configuración de las variables de entorno, establecer la variable...

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability

PoC-y-reglas-yara-de-CVE-2025-59528-Flowise-tiene-vulnerabilidad-de-ejecución-remota-de-código DESCARGO LEGAL Y TÉRMINOS DE USO El código de Prueba de Concepto PoC y la información técnica proporcionados en este documento están destinados únicamente con fines educativos, investigación académica y...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Prueba de concepto para investigar CVE-2025-59528 en un entorno de laboratorio aislado. !WARNING DESCARGO DE RESPONSABILIDAD Este proyecto está destinado estrictamente a fines educativos, investigación de seguridad y pruebas de sistemas que usted posee o para los que cuenta con...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP 远程代码执行 PoC 一个针对 CVE-2025-59528 的 Go 语言概念验证，影响 Flowise 版本 示例...

Flowise - NVIDIA NIM Endpoints Missing Authentication

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router /api/v1/nvidia-nim/ is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generati...

Flowise < 3.1.2 - node-custom-function Unauthorized RCE

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When...

Flowise 1.6.5 - Authentication Bypass

The flowise version = 1.6.5 is vulnerable to authentication bypass vulnerability. id: CVE-2024-31621 info: name: Flowise 1.6.5 - Authentication Bypass author: DhiyaneshDK severity: high description: | The flowise version = 1.6.5 is vulnerable to authentication bypass vulnerability. impact: |...

Flowise <= 1.8.2 Authentication Bypass

An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality. id: CVE-2024-8181 info: name: Flowise = 1.8.2 Authentication Bypass author:...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP 远程代码执行 CVSS 10.0（严重） | 盲式 RCE | FlowiseAI Flowise = 2.2.7-patch.1 且 3.0.6 概述 FlowiseAI Flowise 的 CustomMCP 节点中存在一个严重的远程代码执行漏洞。convertToValidJSONString 函数将来自 mcpServerConfig 参数的用户输入直接传递给 JavaScript 的 Function 构造函数，其功能等同于 eval，从而允许以完整的 Node.js 运行时权限执行任意 JavaScri...