Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Flowise — Vulnerabilities & Security Advisories 144

All 144 CVE vulnerabilities found in Flowise, with AI-generated Chinese analysis, references, and POCs.

This page documents known security vulnerabilities associated with the open-source orchestration framework Flowise, categorized under common weakness types such as improper input validation and authorization failures. The collection aggregates public disclosure records, vendor advisories, and community-reported issues ranging from the project's initial release through recent updates, providing a comprehensive historical view of its security posture. Here, you can track a vendor's advisories to understand the timeline and remediation efforts behind specific patches, understand a weakness class by observing how certain architectural patterns in LLM orchestration tools manifest as exploitable bugs, or look up a product's vulnerability history to assess its stability and risk profile over time. This resource serves as a neutral reference for security researchers, developers, and enterprise buyers evaluating Flowise for deployment in production environments. By centralizing disparate sources of vulnerability data, the page eliminates the need to search multiple CVE databases or project repositories individually. Users can analyze trends in bug reports, compare the frequency of critical severity issues against less severe findings, and review the effectiveness of past security responses. The data is structured to facilitate quick retrieval of relevant information without requiring deep knowledge of the underlying codebase, enabling stakeholders to make informed decisions regarding risk mitigation and upgrade strategies.

Vendor: FlowiseAI

CVE ID Title CVSS Severity Published
CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer CWE-78 9.4 Critical 2026-08-13
CVE-2026-71962 Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download CWE-862 7.5 High 2026-08-10
CVE-2026-67620 Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List CWE-918 7.7 High 2026-08-08
CVE-2026-70636 Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint CWE-862 7.5 High 2026-08-06
CVE-2026-67622 Flowise 3.1.4 IDOR in OpenAI Assistants Integration CWE-639 9.9 Critical 2026-08-06
CVE-2026-67621 Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints CWE-862 7.6 High 2026-08-06
CVE-2026-70478 Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service CWE-200 9.2 Critical 2026-08-04
CVE-2026-70477 Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability CWE-94 9.5 Critical 2026-08-04
CVE-2026-70476 Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation CWE-284 8.3 High 2026-08-04
CVE-2026-70475 Flowise: Missing Authorization on Execution Update Endpoint CWE-862 7.1 High 2026-08-04
CVE-2026-70474 Flowise: Cross-Workspace OAuth2 Credential Metadata Leak CWE-863 7.6 High 2026-08-04
CVE-2026-70473 Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history CWE-200 8.3 High 2026-08-04
CVE-2026-70472 Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store CWE-285 7.1 High 2026-08-04
CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure CWE-863 7.1 High 2026-08-04
CVE-2026-70470 Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE CWE-184 9.5 Critical 2026-08-04
CVE-2026-69264 Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation CWE-94 9.4 Critical 2026-08-04
CVE-2026-69263 Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) CWE-184 8.7 High 2026-08-04
CVE-2026-69262 Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type CWE-863 7.1 High 2026-08-04
CVE-2026-69259 Flowise RCE via SQLite Record Manager Node CWE-94 9.4 Critical 2026-08-04
CVE-2026-69258 Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API CWE-639 8.8 High 2026-08-04
CVE-2026-69257 Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses CWE-918 7.6 High 2026-08-04
CVE-2026-69256 Flowise: Remote Code Execution Vulnerability in CSVAgent CWE-94 9.4 Critical 2026-08-04
CVE-2026-69255 Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified CWE-94 9.2 Critical 2026-08-04
CVE-2026-69254 Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override CWE-94 9.4 Critical 2026-08-04
CVE-2026-69253 Flowise Sandbox Escape to RCE CWE-95 9.0 Critical 2026-08-04
CVE-2026-69252 Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization CWE-862 7.2 High 2026-08-04
CVE-2026-69251 Flowise RCE via TypeORM DataSource CWE-94 9.0 Critical 2026-08-04
CVE-2026-69250 Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration CWE-639 8.5 High 2026-08-04
CVE-2026-56271 Flowise - Weak Default JWT Secrets in Authentication Middleware CWE-321 9.8 Critical 2026-07-12
CVE-2026-56273 Flowise - Path Traversal in Vector Store basePath Parameter CWE-22 6.5 Medium 2026-07-08

All 144 known CVE vulnerabilities affecting Flowise with full Chinese analysis, references, and POCs where available.