FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain Left: FlowiseAI login page — Right: root shell via CVE-2025-59528 · uid=0root Table of Content...

FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload

FlowiseAI Flowise version 2.2.6 and below contains an arbitrary file upload vulnerability in the /api/v1/attachments endpoint. This vulnerability allows an unauthenticated attacker to upload files outside the intended directory through path traversal, potentially leading to API key exposure and...

CVE-2025-58434-Flowiseai-Auth-Bypass-PoC

CVE-2025-58434 Flowiseai Auth Bypass PoC...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP Remote Code Execution CVSS 10.0 Critical | Blind RCE | FlowiseAI Flowise = 2.2.7-patch.1 and = 2.2.7-pa...

FlowiseAI Flowise permission and access control issue vulnerability

FlowiseAI Flowise versions 3.1.4 and earlier contain a vulnerability related to permission escalation and access control. This vulnerability stems from a sandbox escape issue: attackers can submit JavaScript to /api/v1/node-custom-function, then write files to the mammoth package via LocalFileSto...

Exploit for Code Injection in Flowiseai Flowise

flowise-cve-2026-69254-check Stand...

Protection Mechanism Failure

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Protection Mechanism Failure via the vm2/@flowiseai/nodevm JavaScript sandbox in the /api/v1/node-custom-function endpoint. An authenticated attacker can supply attacker-controlled...

Protection Mechanism Failure

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Protection Mechanism Failure via the vm2/@flowiseai/nodevm JavaScript sandbox in the /api/v1/node-custom-function endpoint. An authenticated attacker can supply attacker-controlled executablePath and args...

CVE-2026-100609

creationtimestamp| type| source ---|---|--- 2026-09-28 02:38:02+00:00| seen| https://www.acn.gov.it/portale/w/flowiseai-poc-pubbliche-per-lo-sfruttamento-di-6-vulnerabilita...

CVE-2026-100608

creationtimestamp| type| source ---|---|--- 2026-09-28 02:38:02+00:00| seen| https://www.acn.gov.it/portale/w/flowiseai-poc-pubbliche-per-lo-sfruttamento-di-6-vulnerabilita...

CVE-2026-90580 FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery

A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side...

CVE-2026-90580

FlowiseAI Flowise (up to version 3.0.2) contains a server-side request forgery (SSRF) vulnerability in the Evaluations Endpoint . The flaw resides in the axios.post function within packages/server/src/controllers/evaluations/index.ts, where manipulation of the Host or X-Forwarded-Proto header all...

CVE-2026-90580 FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery

A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side...

CVE-2026-90580 FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery

A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side...

CVE-2026-90580

A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side...

PT-2026-90951

Name of the Vulnerable Software and Affected Versions FlowiseAI Flowise versions prior to 3.1.3 Description A server-side request forgery SSRF exists in the Evaluations Endpoint component within the axios.post function of the packages/server/src/controllers/evaluations/index.ts file. This issue...

CVE-2026-90580: Server-Side Request Forgery (SSRF)

A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side...

Exploit for Code Injection in Flowiseai Flowise

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-E...

Duplicate Advisory: Flowise contains an unauthenticated sandbox escape

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9gvv-qjj3-2p6g. This link is maintained to preserve external references. Original Description Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the...

GHSA-6J9G-8FXC-25HQ Duplicate Advisory: Flowise contains an unauthenticated sandbox escape

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9gvv-qjj3-2p6g. This link is maintained to preserve external references. Original Description Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the...