Flowise
- Software type
- AI and machine learning platform
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Flowise recorded 31 security vulnerabilities in the last 90 days, of which 25 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Flowise and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119978Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStoreCVE-2026-100610Flowise through 3.1.4 Missing Authorization via upsert-historyCVE-2026-100609Flowise through 3.1.4 Insecure Direct Object Reference via CredentialCVE-2026-100608Flowise through 3.1.4 Authorization Bypass via BullMQ DashboardCVE-2026-100607Flowise through 3.1.4 Authentication Bypass via Email-Only SSO| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-119978Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore | Exploitation statusNot confirmed | FixYes |
| SeverityCritical |
CVE-2026-100610Flowise through 3.1.4 Missing Authorization via upsert-history | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100609Flowise through 3.1.4 Insecure Direct Object Reference via Credential | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100608Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100607Flowise through 3.1.4 Authentication Bypass via Email-Only SSO | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityCritical |
|---|
CVE-2026-100606Flowise through 3.1.4 Authentication Bypass via SSO Email Match | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityCritical |
|---|
CVE-2026-100605Flowise through 3.1.4 Missing Authorization via Chat Message Routes | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-91938Flowise before 3.1.4 Server-Side Request Forgery via document loaders | Exploitation statusNot exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionId | Exploitation statusNot exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91936Flowise before 3.1.4 Script Injection via Docker Workflows | Exploitation statusActively exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes | Exploitation statusActively exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91934Flowise before 3.1.4 Remote Code Execution via SQL Database Chain | Exploitation statusNot exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91933Flowise before 3.1.4 Authorization Bypass via openai-realtime | Exploitation statusNot exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91932Flowise before 3.1.4 Remote Code Execution via cwd Parameter | Exploitation statusActively exploited | FixYes | Published09/15/2026 | SeverityCritical |
|---|
CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npx | Exploitation statusActively exploited | FixYes | Published09/15/2026 | SeverityCritical |
|---|
CVE-2026-91930Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover | Exploitation statusActively exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-91929Flowise before 3.1.4 Cross-Tenant Authorization Bypass | Exploitation statusNot exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-90580FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery | Exploitation statusActively exploited | FixYes | Published09/13/2026 | SeverityMedium |
|---|
CVE-2026-90535Flowise before 3.1.4 Denial of Service via text-to-speech/abort | Exploitation statusActively exploited | FixYes | Published09/12/2026 | SeverityMedium |
|---|
CVE-2026-90534Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method | Exploitation statusNot exploited | FixYes | Published09/12/2026 | SeverityMedium |
|---|
CVE-2026-90533Flowise before 3.1.4 Broken Access Control via organizationuser | Exploitation statusActively exploited | FixYes | Published09/12/2026 | SeverityMedium |
|---|
CVE-2026-73604Flowise before 3.1.3 Credential Exposure via API | Exploitation statusActively exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-73603Flowise before 3.1.4 Credential Abuse via Text-to-Speech | Exploitation statusActively exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-73602Flowise before 3.1.3 Sandbox Escape to RCE | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73601Flowise before 3.1.3 Remote Code Execution via Custom MCP | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73488Flowise before 3.1.3 IDOR via customer-default-source endpoint | Exploitation statusActively exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-73487Flowise before 3.1.3 Prompt Injection RCE via CSV Agent | Exploitation statusActively exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73486Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV | Exploitation statusActively exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73485Flowise before 3.1.3 Remote Code Execution via Airtable Agent | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-73484Flowise before 3.1.3 Sandbox Escape via Pandas Methods | Exploitation statusActively exploited | FixYes | Published08/13/2026 | SeverityHigh |
|---|
CVE-2026-73483Flowise before 3.1.3 Sandbox Escape via Puppeteer | Exploitation statusActively exploited | FixYes | Published08/13/2026 | SeverityCritical |
|---|
CVE-2026-71962Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download | Exploitation statusActively exploited | FixNo | Published08/10/2026 | SeverityHigh |
|---|
CVE-2026-67620Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List | Exploitation statusActively exploited | FixNo | Published08/08/2026 | SeverityMedium |
|---|
CVE-2026-70636Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint | Exploitation statusActively exploited | FixNo | Published08/06/2026 | SeverityHigh |
|---|
CVE-2026-67622Flowise 3.1.4 IDOR in OpenAI Assistants Integration | Exploitation statusActively exploited | FixNo | Published08/06/2026 | SeverityHigh |
|---|
CVE-2026-67621Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints | Exploitation statusActively exploited | FixNo | Published08/06/2026 | SeverityHigh |
|---|
CVE-2026-70478Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-70476Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70475Flowise: Missing Authorization on Execution Update Endpoint | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70474Flowise: Cross-Workspace OAuth2 Credential Metadata Leak | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70473Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70472Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70471Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure | Exploitation statusNot exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-70470Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69264Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69263Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-69262Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-69259Flowise RCE via SQLite Record Manager Node | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69258Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
119 Results | Page 1 of 3