Lucene search
+L

474008 matches found

Patchstack
Patchstack
added 3 days ago7 views

NPM: Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

NPM: Flowise: DELETE /api/v1/chatflows/:id does not validate resource type, allowing agentflows:delete and chatflows:delete to delete each other’s flow type vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 3 days ago28 views

CVE-2026-69262

Flowise prior to 3.1.3 has an access control flaw in DELETE /api/v1/chatflows/:id: possession of either chatflows:delete or agentflows:delete allowed access to the delete path, but the target resource type was not validated. The delete logic resolved the record only by id and workspaceId, permitt...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References4
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-52794

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, DELETE /api/v1/chatflows/:id authorized requests with checkAnyPermission'chatflows:delete,agentflows:delete', so possession of either permission was sufficient to reach the delete path. The...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References4
Cvelist
Cvelist
added 3 days ago31 views

CVE-2026-48121 @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access

@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...

6.7CVSS0.00229EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago49 views

CVE-2026-48121

The CVE-2026-48121 vulnerability affects @langchain/langgraph-checkpoint-mongodb (MongoDBSaver) and involves NoSQL parameter injection in MongoDB queries. Versions 1.3.0 and earlier pass checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from config.configurable directly into MongoD...

6.7CVSS5.4AI score0.00229EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago7 views

CVE-2026-69253

Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to version 3.1.3, several custom-tool components — AgentAsTool, ChatflowTool, and ExecuteFlow — ran code in the in-process vm2 sandbox. To build that code, they inserted a user-controlled...

9CVSS0.00312EPSS
SaveExploits0References4
NVD
NVD
added 3 days ago7 views

CVE-2026-69254

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching...

9.4CVSS0.00362EPSS
SaveExploits0References4
Cvelist
Cvelist
added 3 days ago34 views

CVE-2026-69259 Flowise RCE via SQLite Record Manager Node

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended...

9.4CVSS0.00354EPSS
SaveExploits0References4
CVE
CVE
added 3 days ago28 views

CVE-2026-69259

Summary: CVE-2026-69259 affects Flowise (SQLite Record Manager node) prior to 3.1.3. The vulnerability arises from user-controlled additionalConfig in SQLiteRecordManager.ts, which could overwrite the SQLite database path, allowing an authenticated attacker using a published Docker image (running...

9.4CVSS5.7AI score0.00354EPSS
SaveExploits0References4
Patchstack
Patchstack
added 3 days ago6 views

NPM: Flowise RCE via SQLite Record Manager Node

NPM: Flowise RCE via SQLite Record Manager Node vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

9.4CVSS5.4AI score0.00354EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 3 days ago10 views

NPM: Flowise RCE via SQLite Record Manager Node

NPM: Flowise RCE via SQLite Record Manager Node vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

9.4CVSS5.4AI score0.00354EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-18774 NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgery

A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function saveurlimage of the file agent/imagegenprovider.py of the component xAI Image Generation Provider. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has...

6.5CVSS0.00201EPSS
SaveExploits0References5
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

7.5CVSS0.00548EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-52762

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the unauthenticated POST /api/v1/prediction/:id endpoint accepted an overrideConfig object and unconditionally spread it into internal flowConfig and flowData objects in...

8.8CVSS7.6AI score0.00383EPSS
SaveExploits0References4
OSV
OSV
added 3 days ago18 views

ROOT-APP-PYPI-CVE-2026-34515 CVE-2026-34515 in aiohttp - Patched by Root

Root has patched CVE-2026-34515 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0
EUVD
EUVD
added 3 days ago5 views

EUVD-2026-52748

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

6.9CVSS5.4AI score0.00521EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 3 days ago12 views

CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

6.9CVSS5.4AI score0.00521EPSS
SaveExploits0References8Affected Software1
Patchstack
Patchstack
added 3 days ago7 views

NPM: Flowise: Remote Code Execution Vulnerability in CSVAgent

NPM: Flowise: Remote Code Execution Vulnerability in CSVAgent discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

9.4CVSS5.6AI score0.0039EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-52746

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent node allowed users to provide Python code that is executed through pyodide; although a denylist blocked dangerous Python constructs, pandas.readpickle could deserialize a pickled...

9.4CVSS6.2AI score0.0039EPSS
SaveExploits0References4
Patchstack
Patchstack
added 3 days ago5 views

NPM: Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

NPM: Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

9.2CVSS5.7AI score0.00313EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder