en
FlowiseAI is a United States-based software organization and open-source project maintainer in the generative AI application development field. Its core work centers on Flowise, a visual low-code platform for creating AI agents, chatbots, and LLM workflows. The project is intended for developers, technical teams, and organizations using self-hosted or service-based deployments.
As of 11/08/2026, FlowiseAI recorded 31 security vulnerabilities in the last 90 days across 1 products, including 25 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Flowise had the most security vulnerabilities in the FlowiseAI ecosystem, with 31 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119978Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStoreCVE-2026-100610Flowise through 3.1.4 Missing Authorization via upsert-historyCVE-2026-100609Flowise through 3.1.4 Insecure Direct Object Reference via CredentialCVE-2026-100608Flowise through 3.1.4 Authorization Bypass via BullMQ DashboardCVE-2026-100607Flowise through 3.1.4 Authentication Bypass via Email-Only SSO| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-119978Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore | Exploitation statusNot confirmed | FixYes |
| Published10/30/2026 |
| SeverityCritical |
CVE-2026-100610Flowise through 3.1.4 Missing Authorization via upsert-history | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100609Flowise through 3.1.4 Insecure Direct Object Reference via Credential | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100608Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100607Flowise through 3.1.4 Authentication Bypass via Email-Only SSO | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/26/2026 | SeverityCritical |
|---|
CVE-2026-100606Flowise through 3.1.4 Authentication Bypass via SSO Email Match | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/26/2026 | SeverityCritical |
|---|
CVE-2026-100605Flowise through 3.1.4 Missing Authorization via Chat Message Routes | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-91938Flowise before 3.1.4 Server-Side Request Forgery via document loaders | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionId | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91936Flowise before 3.1.4 Script Injection via Docker Workflows | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91934Flowise before 3.1.4 Remote Code Execution via SQL Database Chain | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91933Flowise before 3.1.4 Authorization Bypass via openai-realtime | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91932Flowise before 3.1.4 Remote Code Execution via cwd Parameter | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityCritical |
|---|
CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npx | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityCritical |
|---|
CVE-2026-91930Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91929Flowise before 3.1.4 Cross-Tenant Authorization Bypass | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-90580FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/13/2026 | SeverityMedium |
|---|
CVE-2026-90535Flowise before 3.1.4 Denial of Service via text-to-speech/abort | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/12/2026 | SeverityMedium |
|---|
CVE-2026-90534Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published09/12/2026 | SeverityMedium |
|---|
CVE-2026-90533Flowise before 3.1.4 Broken Access Control via organizationuser | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published09/12/2026 | SeverityMedium |
|---|
CVE-2026-73604Flowise before 3.1.3 Credential Exposure via API | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-73603Flowise before 3.1.4 Credential Abuse via Text-to-Speech | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-73602Flowise before 3.1.3 Sandbox Escape to RCE | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73601Flowise before 3.1.3 Remote Code Execution via Custom MCP | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73488Flowise before 3.1.3 IDOR via customer-default-source endpoint | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-73487Flowise before 3.1.3 Prompt Injection RCE via CSV Agent | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73486Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73485Flowise before 3.1.3 Remote Code Execution via Airtable Agent | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73484Flowise before 3.1.3 Sandbox Escape via Pandas Methods | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-73483Flowise before 3.1.3 Sandbox Escape via Puppeteer | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-71962Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download | Exploitation statusActively exploited | FixNo | Affected productFlowise | Published08/10/2026 | SeverityHigh |
|---|
CVE-2026-67620Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List | Exploitation statusActively exploited | FixNo | Affected productFlowise | Published08/08/2026 | SeverityMedium |
|---|
CVE-2026-70636Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint | Exploitation statusActively exploited | FixNo | Affected productFlowise | Published08/06/2026 | SeverityHigh |
|---|
CVE-2026-67622Flowise 3.1.4 IDOR in OpenAI Assistants Integration | Exploitation statusActively exploited | FixNo | Affected productFlowise | Published08/06/2026 | SeverityHigh |
|---|
CVE-2026-67621Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints | Exploitation statusActively exploited | FixNo | Affected productFlowise | Published08/06/2026 | SeverityHigh |
|---|
CVE-2026-70478Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-70476Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70475Flowise: Missing Authorization on Execution Update Endpoint | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70474Flowise: Cross-Workspace OAuth2 Credential Metadata Leak | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70473Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70472Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70471Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure | Exploitation statusNot exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70470Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69264Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69263Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-69262Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-69259Flowise RCE via SQLite Record Manager Node | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69258Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API | Exploitation statusActively exploited | FixYes | Affected productFlowise | Published08/04/2026 | SeverityHigh |
|---|
120 Results | Page 1 of 3