Flowise
- Software type
- AI and machine learning platform
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Flowise recorded 31 security vulnerabilities in the last 90 days, of which 25 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Flowise and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-69257Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 AddressesCVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgentCVE-2026-69255Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell VerifiedCVE-2026-69254Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions OverrideCVE-2026-69253Flowise Sandbox Escape to RCE| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-69257Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses | Exploitation statusActively exploited | FixYes |
| SeverityHigh |
CVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgent | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69255Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69254Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69253Flowise Sandbox Escape to RCE | Exploitation statusNot exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69252Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-69251Flowise RCE via TypeORM DataSource | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityCritical |
|---|
CVE-2026-69250Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration | Exploitation statusActively exploited | FixYes | Published08/04/2026 | SeverityHigh |
|---|
CVE-2026-12821FlowiseAI Flowise S3 Document Loader S3.ts path traversal | Exploitation statusActively exploited | FixNo | Published06/21/2026 | SeverityMedium |
|---|
CVE-2026-46480Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46479Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46478Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46477Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46476Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46475Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46444Flowise: Vector Store No Permission Checks | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46443Flowise: Credential Data Leak | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46442Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityCritical |
|---|
CVE-2026-46441Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-46440Flowise: Basic Auth Credentials Exposed via API | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-42863Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-42862Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-42861Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment | Exploitation statusActively exploited | FixYes | Published06/08/2026 | SeverityHigh |
|---|
CVE-2026-43995Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityMedium |
|---|
CVE-2026-8028FlowiseAI Flowise Endpoint account.service.ts verify information disclosure | Exploitation statusActively exploited | FixNo | Published05/06/2026 | SeverityMedium |
|---|
CVE-2026-8027FlowiseAI Flowise User Controller authorization | Exploitation statusActively exploited | FixNo | Published05/06/2026 | SeverityMedium |
|---|
CVE-2026-8026FlowiseAI Flowise API Response account.service.ts login information disclosure | Exploitation statusActively exploited | FixNo | Published05/06/2026 | SeverityMedium |
|---|
CVE-2026-41279Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials | Exploitation statusNot exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41278Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs | Exploitation statusNot exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41277Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41276Flowise: AccountService resetPassword Authentication Bypass Vulnerability | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41275Flowise: Password Reset Link Sent Over Unsecured HTTP | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41274Flowise: Cypher Injection in GraphCypherQAChain | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityCritical |
|---|
CVE-2026-41273Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41272Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41271Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41270Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41269Flowise: File Upload Validation Bypass in createAttachment | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41268Flowise: Flowise Parameter Override Bypass Remote Command Execution | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41267Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41266Flowise: Sensitive Data Leak in public-chatbotConfig | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41265Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityCritical |
|---|
CVE-2026-41264Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityCritical |
|---|
CVE-2026-41138Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas. | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityHigh |
|---|
CVE-2026-41137Flowise: Code Injection in CSVAgent leads to Authenticated RCE | Exploitation statusActively exploited | FixYes | Published04/23/2026 | SeverityCritical |
|---|
CVE-2026-40933Flowise: Authenticated RCE Via MCP Adapters | Exploitation statusActively exploited | FixYes | Published04/21/2026 | SeverityCritical |
|---|
CVE-2026-31829Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access | Exploitation statusActively exploited | FixYes | Published03/10/2026 | SeverityHigh |
|---|
CVE-2026-30824Flowise: Missing Authentication on NVIDIA NIM Endpoints | Exploitation statusActively exploited | FixYes | Published03/07/2026 | SeverityHigh |
|---|
CVE-2026-30823Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration | Exploitation statusActively exploited | FixYes | Published03/07/2026 | SeverityHigh |
|---|
CVE-2026-30822Flowise: Mass Assignment in `/api/v1/leads` Endpoint | Exploitation statusActively exploited | FixYes | Published03/07/2026 | SeverityHigh |
|---|
119 Results | Page 2 of 3