{
 "id": "AIR-2026-1068",
 "slug": "cve-2026-8027-authorization-bypass-in-flowiseai-flowise-user",
 "title": "CVE-2026-8027: Authorization bypass in FlowiseAI Flowise user controller handler",
 "summary": "An authorization bypass vulnerability was identified in FlowiseAI Flowise up to 3.0.12 via manipulation of user, organization, or workspace identifiers. Remotely initiated attacks can be mitigated by upgrading the affected component.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Flowise"
 ],
 "incident_date": "2026-05-06",
 "incident_date_precision": "day",
 "first_reported": "2026-05-06",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8027",
   "publisher": "NVD",
   "title": "CVE-2026-8027: A weakness has been identified in FlowiseAI Flowise up to 3.0.12.",
   "published_at": "2026-05-06"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-8027",
  "authorization_bypass"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}