7 matches found
CVE-2026-69251
creationtimestamp| type| source ---|---|--- 2026-08-04 16:35:26+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g32j-mmxr-gfq5...
NPM: FlowiseAI Vulnerable to Credential Data Leak
NPM: FlowiseAI Vulnerable to Credential Data Leak vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.1...
CVE-2026-8028
A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/server/src/enterprise/services/account.service.ts of the component Endpoint. Performing a manipulation results in information disclosure. Remote exploitation of the attack is...
PT-2026-37641
A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/server/src/enterprise/services/account.service.ts of the component Endpoint. Performing a manipulation results in information disclosure. Remote exploitation of the attack is...
Exploit for Code Injection in Flowiseai Flowise
CVE-2025-59528 - FlowiseAI CustomMCP Remote Code Execution...
CVE-2025-26319
FlowiseAI Flowise version 2.2.6 and below is vulnerable to an arbitrary file upload vulnerability in the /api/v1/attachments endpoint. An unauthenticated attacker can exploit a path traversal flaw by manipulating the chatId parameter to upload files outside the intended directory. This can lead t...
