{
 "id": "AIR-2026-0031",
 "slug": "cve-2025-71328-unverified-password-change-vulnerability-in-f",
 "title": "CVE-2025-71328: Unverified password change vulnerability in Flowise",
 "summary": "Flowise contains an unverified password change vulnerability allowing authenticated users to modify account credentials without providing their current password. This flaw can lead to account takeover under specific session hijack scenarios.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Flowise"
 ],
 "incident_date": "2026-06-25",
 "incident_date_precision": "day",
 "first_reported": "2026-06-25",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71328",
   "publisher": "NVD",
   "title": "CVE-2025-71328: Flowise before 3.0.10 contains an unverified password change vulnerability.",
   "published_at": "2026-06-25"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-71328",
  "infra_vuln"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}