{
 "id": "AIR-2026-0876",
 "slug": "ghsa-rwrp-9823-p2xq-flowise-incomplete-credential-redaction",
 "title": "Flowise incomplete credential redaction exposes secrets",
 "summary": "A credential redaction flaw in Flowise causes sensitive connection strings and private keys stored as string types to be returned in plaintext via API. Authenticated users can retrieve these exposed secrets.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "data_leak"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Flowise"
 ],
 "incident_date": "2026-08-04",
 "incident_date_precision": "day",
 "first_reported": "2026-08-04",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-rwrp-9823-p2xq",
   "publisher": "GitHub Advisory Database",
   "title": "GHSA-rwrp-9823-p2xq: Flowise: Incomplete Credential Redaction Exposes Secrets via API",
   "published_at": "2026-08-04"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "ghsa-rwrp-9823-p2xq",
  "data_leak",
  "flowise"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:14:26.300Z"
}