GCD AI RADAR
products/flowise

Flowise

Filed as: FlowiseAI, Flowise Chat Embed, Flowise Cloud, flowise-components, FlowiseAI Flowise

Records
172
Disclosed CVEs
171
Exploited (sev 3–4)
1
CISA KEV flagged
0

Newest record 2026-09-26 · 151 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Patch now: confirmed exploitation or KEV · 1

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

  1. 2026-08-04
    CVE-2026-69255
    CVE-2026-69255: Flowise CSV Agent Remote Code Execution via Pyodide Code Injection
    3 Exploitedrce · pyodide · csv-agent · flowise
    record AIR-2026-0893GitHub Advisory Database ↗

Disclosures by month · last 24 months

Nov ’24161 disclosed · peak 40 in Aug ’26Oct ’26

Disclosed CVEs, no confirmed exploitation · 171

  1. 2026-09-26
    CVE-2026-100605
    Flowise Missing RBAC on Chat Endpoints Permits Unauthorized Data Access
    2 Disclosedrbac · access_control
    record AIR-2026-0212NVD ↗
  2. 2026-09-26
    CVE-2026-100607
    Flowise Authentication Vulnerability Allows Account Takeover via Email Matching
    2 Disclosedsso · authentication
    record AIR-2026-0210NVD ↗
  3. 2026-09-26
    CVE-2026-100606
    CVE-2026-100606: Flowise enterprise mode SSO login authentication bypass
    2 Disclosedflowise · auth-bypass
    record AIR-2026-0207NVD ↗
  4. 2026-09-26
    CVE-2026-100609
    CVE-2026-100609: Flowise credential lookup lacks workspace isolation
    2 Disclosedflowise · access-control
    record AIR-2026-0206NVD ↗
  5. 2026-09-26
    CVE-2026-100608
    CVE-2026-100608: Flowise lacks proper authorization on BullMQ admin dashboard
    2 Disclosedflowise · bullmq
    record AIR-2026-0202NVD ↗
  6. 2026-09-26
    CVE-2026-100610
    CVE-2026-100610: Flowise missing permission checks on upsert-history endpoints
    2 Disclosedflowise · authorization-bypass
    record AIR-2026-0201NVD ↗
  7. 2026-09-15
    CVE-2026-91938
    Flowise Document Loader SSRF Vulnerability
    2 Disclosedflowise · ssrf
    record AIR-2026-1390NVD ↗
  8. 2026-09-15
    CVE-2026-91932
    Flowise Validation Bypass Vulnerability in MCP Server Configuration
    2 Disclosedflowise · mcp · rce
    record AIR-2026-1389NVD ↗
  9. 2026-09-15
    CVE-2026-91934
    CVE-2026-91934: Flowise Path Validation Flaw in SQL Database Chain Node
    2 Disclosedflowise · infra_vuln
    record AIR-2026-1388NVD ↗
  10. 2026-09-15
    CVE-2026-91936
    CVE-2026-91936: Flowise Script Injection Vulnerability in Docker Build Workflows
    2 Disclosedflowise · infra_vuln
    record AIR-2026-1387NVD ↗
  11. 2026-09-15
    CVE-2026-91933
    CVE-2026-91933: Flowise Workspace Authorization Bypass in Realtime Endpoints
    2 Disclosedflowise · infra_vuln
    record AIR-2026-1385NVD ↗
  12. 2026-09-15
    CVE-2026-91937
    Flowise MongoDBMemory Node Query Injection Exposes Chat History
    2 Disclosednosql_injection · flowise
    record AIR-2026-0134NVD ↗
  13. 2026-09-15
    CVE-2026-91929
    Flowise Cross-Tenant Authorization Gaps in Enterprise Endpoints
    2 Disclosedauthorization · flowise
    record AIR-2026-0133NVD ↗
  14. 2026-09-15
    CVE-2026-91935
    Flowise baseURL Parameter Validation Flaw Allows Request Redirection
    2 Disclosedssrf · flowise
    record AIR-2026-0132NVD ↗
  15. 2026-09-15
    CVE-2026-91931
    CVE-2026-91931: Flowise custom MCP node remote code execution
    2 Disclosedrce · mcp · infra_vuln
    record AIR-2026-0131NVD ↗
  16. 2026-09-15
    CVE-2026-91930
    CVE-2026-91930: Flowise tenant isolation bypass vulnerability
    2 Disclosedtenant_isolation · infra_vuln
    record AIR-2026-0130NVD ↗
  17. 2026-09-13
    CVE-2026-90580
    CVE-2026-90580: Flowise Server-Side Request Forgery Vulnerability
    2 Disclosedssrf · flowise
    record AIR-2026-1377NVD ↗
  18. 2026-09-12
    CVE-2026-90535
    CVE-2026-90535: Flowise Denial of Service Vulnerability
    2 Discloseddos · flowise
    record AIR-2026-1374NVD ↗
  19. 2026-09-12
    CVE-2026-90533
    CVE-2026-90533: Flowise broken access control vulnerability
    2 Disclosedinfra_vuln · broken_access_control
    record AIR-2026-1373NVD ↗
  20. 2026-09-12
    CVE-2026-90534
    CVE-2026-90534: Flowise credential resolution permission bypass
    2 Disclosedinfra_vuln · access_control
    record AIR-2026-1372NVD ↗
  21. 2026-09-10
    CVE-2026-52098
    CVE-2026-52098: Flowise remote code execution vulnerability
    2 Disclosedinfra_vuln · rce
    record AIR-2026-1370NVD ↗
  22. 2026-08-13
    CVE-2026-73484
    CVE-2026-73484: Flowise pythonCodeValidator sandbox escape vulnerability
    2 Disclosedsandbox-escape · flowise
    record AIR-2026-1285NVD ↗
  23. 2026-08-13
    CVE-2026-73603
    CVE-2026-73603: Chatflow visibility bypass in Flowise TTS endpoint
    2 Disclosedapi-abuse · access-control
    record AIR-2026-1283NVD ↗
  24. 2026-08-13
    CVE-2026-73486
    CVE-2026-73486: Code injection in Flowise CSV Agent node
    2 Disclosedcode-injection · python
    record AIR-2026-1282NVD ↗
  25. 2026-08-13
    CVE-2026-73604
    CVE-2026-73604: Incomplete credential redaction in Flowise API
    2 Discloseddata-leak · credential-exposure
    record AIR-2026-1281NVD ↗
  26. 2026-08-13
    CVE-2026-73602
    CVE-2026-73602: Sandbox escape and code execution in Flowise
    2 Disclosedsandbox-escape · code-execution
    record AIR-2026-1280NVD ↗
  27. 2026-08-13
    CVE-2026-73601
    CVE-2026-73601: Remote code execution in Flowise Custom MCP node
    2 Disclosedrce · mcp
    record AIR-2026-1278NVD ↗
  28. 2026-08-13
    CVE-2026-73485
    CVE-2026-73485: Code injection vulnerability in Flowise Airtable Agent node
    2 Disclosedrce · code-injection
    record AIR-2026-1277NVD ↗
  29. 2026-08-13
    CVE-2026-73488
    CVE-2026-73488: Insecure direct object reference in Flowise customer endpoint
    2 Disclosedidor
    record AIR-2026-1276NVD ↗
  30. 2026-08-13
    CVE-2026-73483
    CVE-2026-73483: Flowise NodeVM sandbox escape via puppeteer configuration
    2 Disclosedsandbox-escape · rce
    record AIR-2026-0259NVD ↗
  31. 2026-08-13
    CVE-2026-73487
    CVE-2026-73487: Flowise prompt injection bypass leads to RCE and SSRF
    2 Disclosedssrf · rce
    record AIR-2026-0257NVD ↗
  32. 2026-08-10
    CVE-2026-71962
    CVE-2026-71962: Flowise Missing Authorization on Assistant File Download
    2 Disclosedbroken-authorization · flowise
    record AIR-2026-1272NVD ↗
  33. 2026-08-08
    CVE-2026-67620
    CVE-2026-67620: Flowise SSRF Vulnerability in Metadata Guard
    2 Disclosedssrf · flowise
    record AIR-2026-1270NVD ↗
  34. 2026-08-06
    CVE-2026-67621
    CVE-2026-67621: Flowise missing authorization in document store routes
    2 Disclosedmissing-authorization
    record AIR-2026-1267NVD ↗
  35. 2026-08-06
    CVE-2026-67622
    CVE-2026-67622: Flowise IDOR vulnerability in OpenAI Assistants integration
    2 Disclosedidor
    record AIR-2026-1266NVD ↗
  36. 2026-08-06
    CVE-2026-70636
    CVE-2026-70636: Flowise auth bypass vulnerability in OAuth2 endpoint
    2 Disclosedauth-bypass
    record AIR-2026-1265NVD ↗
  37. 2026-08-04
    Flowise Unauthenticated TTS Credential Abuse
    2 Disclosedghsa-8gj2-2cvc-6xx7 · credential-abuse · flowise
    record AIR-2026-0898GitHub Advisory Database ↗
  38. 2026-08-04
    CVE-2026-69256
    CVE-2026-69256: Flowise Remote Code Execution Vulnerability in CSVAgent
    2 Disclosedrce · flowise · pandas
    record AIR-2026-0897GitHub Advisory Database ↗
  39. 2026-08-04
    CVE-2026-69254
    CVE-2026-69254: Flowise RCE via NodeVM Sandbox Escape in executeJavaScriptCode
    2 Disclosedsandbox-escape · rce · flowise
    record AIR-2026-0896GitHub Advisory Database ↗
  40. 2026-08-04
    CVE-2026-69264
    CVE-2026-69264: Flowise RCE via CSVAgent data URI Python interpolation
    2 Disclosedrce · flowise · pyodide
    record AIR-2026-0895GitHub Advisory Database ↗
  41. 2026-08-04
    CVE-2026-70474
    CVE-2026-70474: Flowise Cross-Workspace OAuth2 Credential Metadata Leak
    2 Disclosedoauth2 · flowise
    record AIR-2026-0894GitHub Advisory Database ↗
  42. 2026-08-04
    CVE-2026-69250
    CVE-2026-69250: Flowise Unauthenticated OAuth2 Refresh Enables SSRF and Secret Exfiltration
    2 Disclosedssrf · secret-exfiltration · flowise
    record AIR-2026-0892GitHub Advisory Database ↗
  43. 2026-08-04
    CVE-2026-70470
    CVE-2026-70470: Flowise Pyodide Validator Unicode Homoglyph Bypass Leads to RCE
    2 Disclosedhomoglyph · rce · pyodide · flowise
    record AIR-2026-0891GitHub Advisory Database ↗
  44. 2026-08-04
    CVE-2026-69251
    CVE-2026-69251: Flowise RCE via TypeORM DataSource
    2 Disclosedrce · typeorm · flowise
    record AIR-2026-0890GitHub Advisory Database ↗
  45. 2026-08-04
    CVE-2026-70478
    CVE-2026-70478: Flowise Unauthenticated OAuth2 Token Refresh Endpoint Allows Token Theft
    2 Disclosedoauth2 · token-theft · flowise
    record AIR-2026-0889GitHub Advisory Database ↗
  46. 2026-08-04
    CVE-2026-69252
    CVE-2026-69252: Flowise Missing Authorization on File Routes
    2 Disclosedflowise · missing-authorization
    record AIR-2026-0888GitHub Advisory Database ↗
  47. 2026-08-04
    CVE-2026-69253
    CVE-2026-69253: Flowise Sandbox Escape to Remote Code Execution
    2 Disclosedflowise · sandbox-escape · rce
    record AIR-2026-0887GitHub Advisory Database ↗
  48. 2026-08-04
    CVE-2026-70473
    CVE-2026-70473: Flowise Information Disclosure via Upsert History
    2 Disclosedflowise · information-disclosure
    record AIR-2026-0886GitHub Advisory Database ↗
  49. 2026-08-04
    CVE-2026-70475
    CVE-2026-70475: Flowise Missing Authorization on Execution Update
    2 Disclosedflowise · missing-authorization
    record AIR-2026-0885GitHub Advisory Database ↗
  50. 2026-08-04
    CVE-2026-69259
    CVE-2026-69259: Flowise RCE via SQLite Record Manager Node
    2 Disclosedrce · flowise
    record AIR-2026-0884GitHub Advisory Database ↗
  51. 2026-08-04
    Flowise authenticated arbitrary file write in S3 Directory document loader
    2 Disclosedghsa-88pr-878c-24wf · arbitrary_file_write
    record AIR-2026-0883GitHub Advisory Database ↗
  52. 2026-08-04
    CVE-2026-69257
    Flowise SSRF protection bypass via IPv4-mapped IPv6 addresses
    2 Disclosedssrf
    record AIR-2026-0882GitHub Advisory Database ↗
  53. 2026-08-04
    CVE-2026-69263
    Flowise patch bypass allows unauthenticated RCE via npm_config_yes
    2 Disclosedrce · mcp
    record AIR-2026-0881GitHub Advisory Database ↗
  54. 2026-08-04
    CVE-2026-70476
    Flowise broken access control in Stripe subscription endpoints
    2 Disclosedbroken_access_control
    record AIR-2026-0880GitHub Advisory Database ↗
  55. 2026-08-04
    Flowise IDOR vulnerability exposes payment and profile data
    2 Disclosedidor · ghsa-2364-jh4q-m9vm
    record AIR-2026-0879GitHub Advisory Database ↗
  56. 2026-08-04
    CVE-2026-69262
    CVE-2026-69262: Flowise resource validation flaw in deletion API
    2 Disclosedauthorization_bypass · flowise
    record AIR-2026-0878GitHub Advisory Database ↗
  57. 2026-08-04
    CVE-2026-70471
    CVE-2026-70471: Flowise RBAC bypass leads to workspace variable disclosure
    2 Disclosedrbac_bypass · flowise
    record AIR-2026-0877GitHub Advisory Database ↗
  58. 2026-08-04
    Flowise incomplete credential redaction exposes secrets
    2 Disclosedghsa-rwrp-9823-p2xq · data_leak · flowise
    record AIR-2026-0876GitHub Advisory Database ↗
  59. 2026-08-04
    CVE-2026-69258
    CVE-2026-69258: Flowise unauthenticated property injection in prediction API
    2 Disclosedproperty_injection · flowise
    record AIR-2026-0875GitHub Advisory Database ↗
  60. 2026-08-04
    CVE-2026-70472
    CVE-2026-70472: Flowise cross-workspace credential IDOR vulnerability
    2 Disclosedidor · flowise
    record AIR-2026-0874GitHub Advisory Database ↗
  61. 2026-08-04
    CVE-2026-70477
    Flowise CSV Agent prompt injection leads to remote code execution
    2 Disclosedflowise · remote-code-execution
    record AIR-2026-0873GitHub Advisory Database ↗
  62. 2026-07-12
    CVE-2026-56271
    Weak Hardcoded JWT Secrets in Flowise Authentication
    2 Disclosedweak-crypto · jwt
    record AIR-2026-1159NVD ↗
  63. 2026-07-08
    CVE-2026-56273
    Path Traversal in Flowise Vector Store Implementations
    2 Disclosedpath-traversal
    record AIR-2026-1156NVD ↗
  64. 2026-06-30
    CVE-2026-56278
    CVE-2026-56278: Flowise uses a hardcoded default session secret enabling authentication bypass
    2 Disclosedflowise · auth_bypass · infra_vuln
    record AIR-2026-1138NVD ↗
  65. 2026-06-30
    CVE-2026-56277
    CVE-2026-56277: Flowise text-to-speech endpoint suffers from improper CORS configuration
    2 Disclosedflowise · cors · infra_vuln
    record AIR-2026-1137NVD ↗
  66. 2026-06-28
    CVE-2026-58057
    CVE-2026-58057: Flowise custom MCP stdio environment variable bypass leads to RCE
    2 Disclosedrce · mcp
    record AIR-2026-1132NVD ↗
  67. 2026-06-25
    CVE-2025-71327
    Flowise Authentication Bypass Vulnerability CVE-2025-71327
    2 Disclosedauth-bypass · api-security
    record AIR-2026-0035NVD ↗
  68. 2026-06-25
    CVE-2025-71338
    Flowise Path Traversal File Overwrite Vulnerability CVE-2025-71338
    2 Disclosedpath-traversal · remote-code-execution
    record AIR-2026-0034NVD ↗
  69. 2026-06-25
    CVE-2025-71333
    Flowise Arbitrary File Upload Vulnerability CVE-2025-71333
    2 Disclosedarbitrary-file-upload · path-traversal
    record AIR-2026-0033NVD ↗
  70. 2026-06-25
    CVE-2025-71335
    CVE-2025-71335: Session invalidation failure after password change in Flowise
    2 Disclosedinfra_vuln
    record AIR-2026-0032NVD ↗
  71. 2026-06-25
    CVE-2025-71328
    CVE-2025-71328: Unverified password change vulnerability in Flowise
    2 Disclosedinfra_vuln
    record AIR-2026-0031NVD ↗
  72. 2026-06-25
    CVE-2025-71324
    CVE-2025-71324: Arbitrary file read vulnerability in Flowise
    2 Disclosedpath-traversal · infra_vuln
    record AIR-2026-0030NVD ↗
  73. 2026-06-25
    CVE-2025-71336
    CVE-2025-71336: Unsandboxed remote code execution in Flowise Custom MCP
    2 Disclosedrce · infra_vuln
    record AIR-2026-0029NVD ↗
  74. 2026-06-25
    CVE-2025-71334
    CVE-2025-71334: Arbitrary file access vulnerability in Flowise
    2 Disclosedpath-traversal · infra_vuln
    record AIR-2026-0028NVD ↗
  75. 2026-06-23
    CVE-2026-56274
    CVE-2026-56274: Flowise command injection vulnerability in Custom MCP Server
    2 Disclosedmcp · command-injection
    record AIR-2026-1126NVD ↗
  76. 2026-06-23
    CVE-2025-71337
    Flowise Unverified Email Change Vulnerability
    2 Disclosedflowise · account-takeover
    record AIR-2026-0025NVD ↗
  77. 2026-06-22
    CVE-2026-12821
    CVE-2026-12821: Path traversal vulnerability in Flowise S3 loader
    2 Disclosedpath_traversal
    record AIR-2026-1123NVD ↗
  78. 2026-06-20
    CVE-2026-56276
    CVE-2026-56276: Flowise mass assignment vulnerability in user endpoint
    2 Disclosedinfra_vuln
    record AIR-2026-1120NVD ↗
  79. 2026-06-20
    CVE-2026-56267
    CVE-2026-56267: Flowise information exposure vulnerability in forgot-password endpoint
    2 Disclosedinfra_vuln · data_leak
    record AIR-2026-1119NVD ↗
  80. 2026-06-20
    CVE-2025-71331
    CVE-2025-71331: Flowise cross-site scripting flaw in chat messages and agent functions
    2 Disclosedinfra_vuln · xss
    record AIR-2026-1118NVD ↗
  81. 2026-05-20
    CVE-2026-56268
    CVE-2026-56268: Flowise cross-workspace chatflow information disclosure
    2 Disclosedflowise · info-disclosure
    record AIR-2026-0715GitHub Advisory Database ↗
  82. 2026-05-20
    Flowise hardcoded CORS wildcard on TTS endpoint
    2 Disclosedcors · flowise · credential-abuse
    record AIR-2026-0714GitHub Advisory Database ↗
  83. 2026-05-20
    Flowise mass assignment password override vulnerability
    2 Disclosedmass-assignment · flowise · auth-bypass
    record AIR-2026-0713GitHub Advisory Database ↗
  84. 2026-05-14
    CVE-2026-46441
    CVE-2026-46441: FlowiseAI Mass Assignment Vulnerability in Assistant Update
    2 Disclosedmass-assignment · flowiseai
    record AIR-2026-0703GitHub Advisory Database ↗
  85. 2026-05-14
    CVE-2026-46443
    CVE-2026-46443: FlowiseAI Vulnerable to Credential Data Leak
    2 Discloseddata-leak · flowiseai
    record AIR-2026-0702GitHub Advisory Database ↗
  86. 2026-05-14
    CVE-2026-42861
    CVE-2026-42861: FlowiseAI Mass Assignment Vulnerability in Variable Updates
    2 Disclosedmass-assignment · tenant-isolation
    record AIR-2026-0701GitHub Advisory Database ↗
  87. 2026-05-14
    CVE-2026-46440
    CVE-2026-46440: FlowiseAI Exposes Basic Auth Credentials via API
    2 Disclosedcredential-exposure
    record AIR-2026-0693GitHub Advisory Database ↗
  88. 2026-05-14
    CVE-2026-46444
    CVE-2026-46444: FlowiseAI Vector Store Missing Permission Checks
    2 Disclosedmissing-auth
    record AIR-2026-0692GitHub Advisory Database ↗
  89. 2026-05-14
    CVE-2026-42862
    CVE-2026-42862: FlowiseAI Mass Assignment in Tool Update Endpoint
    2 Disclosedmass-assignment · tenant-isolation
    record AIR-2026-0691GitHub Advisory Database ↗
  90. 2026-05-14
    CVE-2026-46477
    CVE-2026-46477: FlowiseAI Mass Assignment Dataset Takeover
    2 Disclosedmass-assignment · idor
    record AIR-2026-0690GitHub Advisory Database ↗
  91. 2026-05-14
    Flowise MCP security bypass leads to RCE
    2 Disclosedghsa-m99r-2hxc-cp3q · rce · mcp
    record AIR-2026-0682GitHub Advisory Database ↗
  92. 2026-05-14
    CVE-2026-46480
    CVE-2026-46480: FlowiseAI mass-assignment allows cross-workspace evaluator takeover
    2 Disclosedmass-assignment · flowiseai
    record AIR-2026-0681GitHub Advisory Database ↗
  93. 2026-05-14
    CVE-2026-46479
    CVE-2026-46479: FlowiseAI mass-assignment allows cross-workspace evaluation takeover
    2 Disclosedmass-assignment · flowiseai
    record AIR-2026-0680GitHub Advisory Database ↗
  94. 2026-05-14
    CVE-2026-42863
    CVE-2026-42863: FlowiseAI mass assignment allows cross-workspace reassignment
    2 Disclosedmass-assignment · authorization
    record AIR-2026-0670GitHub Advisory Database ↗
  95. 2026-05-14
    CVE-2026-46442
    CVE-2026-46442: FlowiseAI NodeVM sandbox escape and RCE vulnerability
    2 Disclosedsandbox-escape · rce
    record AIR-2026-0669GitHub Advisory Database ↗
  96. 2026-05-14
    CVE-2026-46476
    FlowiseAI CustomTemplate Mass Assignment Workspace Takeover
    2 Disclosedmass_assignment · idor
    record AIR-2026-0661GitHub Advisory Database ↗
  97. 2026-05-14
    CVE-2026-46475
    FlowiseAI Assistant Mass Assignment Workspace Takeover
    2 Disclosedmass_assignment · idor
    record AIR-2026-0660GitHub Advisory Database ↗
  98. 2026-05-14
    CVE-2026-46478
    FlowiseAI DatasetRow Mass Assignment Workspace Takeover
    2 Disclosedmass_assignment · idor
    record AIR-2026-0659GitHub Advisory Database ↗
  99. 2026-05-06
    CVE-2026-8027
    CVE-2026-8027: Authorization bypass in FlowiseAI Flowise user controller handler
    2 Disclosedauthorization_bypass
    record AIR-2026-1068NVD ↗
  100. 2026-05-06
    CVE-2026-8028
    CVE-2026-8028: Information disclosure vulnerability in FlowiseAI Flowise
    2 Disclosedinformation_disclosure
    record AIR-2026-1067NVD ↗
  101. 2026-05-06
    CVE-2026-8026
    Flowise API response handler exposes bcrypt password hashes
    2 Disclosedflowise · information_disclosure
    record AIR-2026-0620GitHub Advisory Database ↗
  102. 2026-04-23
    CVE-2026-41275
    CVE-2026-41275: Cleartext password reset link in Flowise
    2 Disclosedmitm · infra_vuln
    record AIR-2026-1045NVD ↗
  103. 2026-04-21
    CVE-2026-41264
    CVE-2026-41264: Flowise CSV Agent Prompt Injection RCE
    2 Disclosedrce
    record AIR-2026-0595GitHub Advisory Database ↗
  104. 2026-04-18
    CVE-2026-41265
    CVE-2026-41265: Flowise Airtable Agent Remote Code Execution
    2 Disclosedrce
    record AIR-2026-0591GitHub Advisory Database ↗
  105. 2026-04-17
    CVE-2026-41278
    CVE-2026-41278: Flowise Public Endpoints Expose Plaintext API Keys
    2 Disclosedcredential-leak
    record AIR-2026-0590GitHub Advisory Database ↗
  106. 2026-04-17
    CVE-2026-41279
    CVE-2026-41279: Flowise Unauthenticated TTS Endpoint Accepts Arbitrary Credential IDs
    2 Disclosedapi_abuse · flowise
    record AIR-2026-0588GitHub Advisory Database ↗
  107. 2026-04-17
    CVE-2026-41277
    CVE-2026-41277: Flowise Mass Assignment Leads to Cross-Workspace Object Takeover
    2 Disclosedidor · flowise
    record AIR-2026-0587GitHub Advisory Database ↗
  108. 2026-04-16
    CVE-2026-41270
    CVE-2026-41270: Flowise SSRF Protection Bypass via Built-in HTTP Modules
    2 Disclosedssrf · flowise
    record AIR-2026-0586GitHub Advisory Database ↗
  109. 2026-04-16
    CVE-2026-56270
    CVE-2026-56270: Flowise Unauthenticated Information Disclosure of OAuth Secrets
    2 Disclosedinformation_disclosure · flowise
    record AIR-2026-0585GitHub Advisory Database ↗
  110. 2026-04-16
    CVE-2026-41268
    CVE-2026-41268: Flowise Parameter Override Bypass Remote Command Execution
    2 Disclosedrce · flowise
    record AIR-2026-0584GitHub Advisory Database ↗
  111. 2026-04-16
    CVE-2026-41138
    CVE-2026-41138: Flowise AirtableAgent Prompt Injection RCE
    2 Disclosedprompt-injection · rce
    record AIR-2026-0583GitHub Advisory Database ↗
  112. 2026-04-16
    Flowise Weak Default Express Session Secret
    2 Disclosedghsa-2qqc-p94c-hxwh · session-mgmt
    record AIR-2026-0582GitHub Advisory Database ↗
  113. 2026-04-16
    CVE-2026-41266
    CVE-2026-41266: Flowise Sensitive Data Leak in Chatbot Config
    2 Discloseddata-leak
    record AIR-2026-0581GitHub Advisory Database ↗
  114. 2026-04-16
    Flowise Vector Store Path Traversal Vulnerability
    2 Disclosedpath-traversal · ghsa-w6v6-49gh-mc9w
    record AIR-2026-0580GitHub Advisory Database ↗
  115. 2026-04-16
    CVE-2026-41276
    CVE-2026-41276: Flowise resetPassword Authentication Bypass
    2 Disclosedauth-bypass
    record AIR-2026-0579GitHub Advisory Database ↗
  116. 2026-04-16
    CVE-2026-41272
    CVE-2026-41272: Flowise SSRF Protection Bypass via DNS Rebinding and Default Insecure Config
    2 Disclosedssrf · dns-rebinding · flowise
    record AIR-2026-0578GitHub Advisory Database ↗
  117. 2026-04-16
    CVE-2026-43995
    CVE-2026-43995: Flowise SSRF Protection Bypass via Direct HTTP Client Usage
    2 Disclosedssrf · flowise
    record AIR-2026-0577GitHub Advisory Database ↗
  118. 2026-04-16
    Flowise Weak Default JWT Secrets Vulnerability
    2 Disclosedghsa-cc4f-hjpj-g9p8 · jwt · flowise
    record AIR-2026-0576GitHub Advisory Database ↗
  119. 2026-04-16
    CVE-2026-56269
    CVE-2026-56269: Flowise Weak Default Token Hash Secret Vulnerability
    2 Disclosedweak-secret · flowise
    record AIR-2026-0575GitHub Advisory Database ↗
  120. 2026-04-16
    CVE-2026-41274
    CVE-2026-41274: Flowise Cypher Injection Vulnerability in GraphCypherQAChain
    2 Disclosedcypher-injection · flowise
    record AIR-2026-0574GitHub Advisory Database ↗
  121. 2026-04-16
    CVE-2026-41137
    CVE-2026-41137: Flowise CSVAgent Code Injection RCE
    2 Disclosedrce · code_injection
    record AIR-2026-0573GitHub Advisory Database ↗
  122. 2026-04-16
    CVE-2026-41271
    CVE-2026-41271: Flowise APIChain Prompt Injection SSRF
    2 Disclosedssrf · prompt_injection
    record AIR-2026-0572GitHub Advisory Database ↗
  123. 2026-04-16
    CVE-2026-41273
    CVE-2026-41273: Flowise OAuth 2.0 Access Token Disclosure
    2 Disclosedoauth · data_leak
    record AIR-2026-0571GitHub Advisory Database ↗
  124. 2026-04-16
    CVE-2026-40933
    CVE-2026-40933: Flowise Authenticated RCE via MCP Adapters
    2 Disclosedrce · mcp
    record AIR-2026-0570GitHub Advisory Database ↗
  125. 2026-04-16
    CVE-2026-41267
    CVE-2026-41267: Flowise account registration mass assignment vulnerability
    2 Disclosedmass-assignment · access-control
    record AIR-2026-0569GitHub Advisory Database ↗
  126. 2026-04-16
    CVE-2026-41269
    CVE-2026-41269: Flowise file upload validation bypass leads to RCE
    2 Disclosedrce · file-upload
    record AIR-2026-0568GitHub Advisory Database ↗
  127. 2026-04-16
    CVE-2026-56275
    CVE-2026-56275: Flowise Execute Flow node server-side request forgery
    2 Disclosedssrf
    record AIR-2026-0007GitHub Advisory Database ↗
  128. 2026-03-10
    CVE-2026-31829
    CVE-2026-31829: Flowise Affected by Server-Side Request Forgery in HTTP Node
    2 Disclosedssrf · flowise
    record AIR-2026-0498NVD ↗
  129. 2026-03-06
    CVE-2026-30824
    CVE-2026-30824: Flowise Missing Authentication on NVIDIA NIM Endpoints
    2 Disclosedcwe-306 · authentication
    record AIR-2026-0496GitHub Advisory Database ↗
  130. 2026-03-06
    CVE-2026-30821
    CVE-2026-30821: Flowise Arbitrary File Upload via MIME Spoofing
    2 Disclosedfile_upload · flowise
    record AIR-2026-0495GitHub Advisory Database ↗
  131. 2026-03-06
    CVE-2026-30823
    CVE-2026-30823: Flowise IDOR and SSO Configuration Vulnerability
    2 Disclosedidor · flowise
    record AIR-2026-0494GitHub Advisory Database ↗
  132. 2026-03-06
    CVE-2026-30820
    CVE-2026-30820: Flowise Authorization Bypass via Spoofed Header
    2 Disclosedauth_bypass · flowise
    record AIR-2026-0493GitHub Advisory Database ↗
  133. 2026-03-06
    CVE-2026-30822
    CVE-2026-30822: Flowise Allows Mass Assignment on Leads Endpoint
    2 Disclosedcwe-915 · flowise
    record AIR-2026-0492GitHub Advisory Database ↗
  134. 2026-03-05
    Flowise Vulnerable to PII Disclosure
    2 Disclosedcwe-200 · pii_disclosure · flowise
    record AIR-2026-0491GitHub Advisory Database ↗
  135. 2026-03-05
    CVE-2026-56272
    CVE-2026-56272: Flowise Insufficient Password Salt Rounds
    2 Disclosedweak-cryptography · flowise
    record AIR-2026-0490GitHub Advisory Database ↗
  136. 2025-11-17
    Flowise authentication bypass using unprotected registration endpoint
    2 Disclosedauth-bypass · flowise · registration
    record AIR-2025-0372GitHub Advisory Database ↗
  137. 2025-11-14
    Flowise fails to invalidate sessions after password changes
    2 Disclosedsession-management · flowise · authentication
    record AIR-2025-0371GitHub Advisory Database ↗
  138. 2025-10-17
    FlowiseAI Pre-Authentication Arbitrary Code Execution
    2 Disclosedremote-code-execution · flowiseai
    record AIR-2025-0358GitHub Advisory Database ↗
  139. 2025-10-14
    CVE-2025-34267
    CVE-2025-34267: Flowise Sandbox Escape and RCE Vulnerability
    2 Disclosedrce · infra_vuln
    record AIR-2025-0034NVD ↗
  140. 2025-10-10
    Flowise vulnerable to arbitrary file exposure
    2 Disclosedflowise · path-traversal · file-exposure
    record AIR-2025-0354GitHub Advisory Database ↗
  141. 2025-10-08
    CVE-2025-61913
    CVE-2025-61913: Flowise File Path Traversal Vulnerability
    2 Disclosedinfra_vuln
    record AIR-2025-0033NVD ↗
  142. 2025-10-06
    CVE-2025-55346
    CVE-2025-55346: Flowise vulnerable to RCE via Dynamic function constructor injection
    2 Disclosedrce · mcp
    record AIR-2025-0350GitHub Advisory Database ↗
  143. 2025-10-06
    CVE-2025-61687
    CVE-2025-61687: Flowise file upload vulnerability leads to RCE
    2 Disclosedrce · file-upload
    record AIR-2025-0030NVD ↗
  144. 2025-10-03
    Flowise vulnerable to XSS
    2 Disclosedghsa-4fr9-3x69-36wv · xss
    record AIR-2025-0349GitHub Advisory Database ↗
  145. 2025-10-03
    CVE-2025-50538
    CVE-2025-50538: Flowise iframe cross-site scripting vulnerability
    2 Disclosedxss
    record AIR-2025-0032GitHub Advisory Database ↗
  146. 2025-10-03
    CVE-2025-29192
    CVE-2025-29192: Flowise chat log cross-site scripting vulnerability
    2 Disclosedxss
    record AIR-2025-0031GitHub Advisory Database ↗
  147. 2025-09-22
    CVE-2025-59434
    CVE-2025-59434: Cross-tenant environment variable exposure in Flowise Cloud
    2 Discloseddata-exposure · flowise
    record AIR-2025-0025NVD ↗
  148. 2025-09-15
    Flowise Arbitrary File Read
    2 Disclosedghsa-99pg-hqvx-r4gf · file-read
    record AIR-2025-0341GitHub Advisory Database ↗
  149. 2025-09-15
    CVE-2025-57164
    CVE-2025-57164: FlowiseAI Pre-Auth Arbitrary Code Execution
    2 Disclosedrce
    record AIR-2025-0340GitHub Advisory Database ↗
  150. 2025-09-15
    Flowise unsandboxed remote code execution via Custom MCP
    2 Disclosedghsa-6933-jpx5-q87q · rce · mcp
    record AIR-2025-0339GitHub Advisory Database ↗
  151. 2025-09-15
    Flowise arbitrary file access via missing chat flow id validation
    2 Disclosedghsa-q67q-549q-p849 · path-traversal
    record AIR-2025-0338GitHub Advisory Database ↗
  152. 2025-09-15
    CVE-2025-59528
    CVE-2025-59528: Flowise remote code execution via CustomMCP node
    2 Disclosedrce · mcp
    record AIR-2025-0337GitHub Advisory Database ↗
  153. 2025-09-15
    CVE-2025-59527
    CVE-2025-59527: Server-Side Request Forgery vulnerability in Flowise
    2 Disclosedssrf · flowise
    record AIR-2025-0026GitHub Advisory Database ↗
  154. 2025-09-12
    CVE-2025-58434
    CVE-2025-58434: Flowise Unauthenticated Password Reset Vulnerability
    2 Disclosedflowise · account-takeover · infra-vuln
    record AIR-2025-0022NVD ↗
  155. 2025-08-14
    CVE-2025-8943
    CVE-2025-8943: Flowise OS command remote code execution
    2 Disclosedflowise · rce · mcp
    record AIR-2025-0324GitHub Advisory Database ↗
  156. 2025-04-09
    CVE-2025-29189
    CVE-2025-29189: Flowise SQL Injection Vulnerability
    2 Disclosedsql-injection
    record AIR-2025-0007NVD ↗
  157. 2025-04-07
    CVE-2025-71332
    Flowise SQL Injection Vulnerability in Import Chatflows API
    2 Disclosedflowise · sqli
    record AIR-2026-0027GitHub Advisory Database ↗
  158. 2025-03-14
    Flowise allows arbitrary file write to RCE
    2 Disclosedghsa-8vvx-qvq9-5948 · rce · arbitrary-file-write
    record AIR-2025-0205GitHub Advisory Database ↗
  159. 2025-03-13
    Flowise Pre-Authentication Arbitrary File Upload Vulnerability
    2 Disclosedflowise · arbitrary-file-upload
    record AIR-2025-0204GitHub Advisory Database ↗
  160. 2025-03-04
    CVE-2025-26319
    Arbitrary File Upload Vulnerability in FlowiseAI Flowise
    2 Disclosedfile-upload · vulnerability · flowise
    record AIR-2025-0004NVD ↗
  161. 2024-11-21
    CVE-2024-58351
    CVE-2024-58351: Flowise OverrideConfig security vulnerability
    2 Disclosedrce · sandbox-escape
    record AIR-2024-0201GitHub Advisory Database ↗
  162. 2024-09-25
    CVE-2024-9148
    CVE-2024-9148: Flowise and Flowise Chat Embed stored XSS vulnerability
    2 Disclosedxss
    record AIR-2024-0173GitHub Advisory Database ↗
  163. 2024-08-27
    CVE-2024-8181
    CVE-2024-8181: Flowise authentication bypass vulnerability
    2 Disclosedauth-bypass · flowise
    record AIR-2024-0163GitHub Advisory Database ↗
  164. 2024-08-27
    CVE-2024-8182
    CVE-2024-8182: Flowise unauthenticated denial of service vulnerability
    2 Discloseddos · flowise
    record AIR-2024-0162GitHub Advisory Database ↗
  165. 2024-07-01
    CVE-2024-36420
    CVE-2024-36420: Flowise Path Injection Vulnerability
    2 Disclosedpath-injection · flowise
    record AIR-2024-0159NVD ↗
  166. 2024-07-01
    CVE-2024-36422
    CVE-2024-36422: Flowise Cross-site Scripting Vulnerability
    2 Disclosedxss · flowise
    record AIR-2024-0158NVD ↗
  167. 2024-07-01
    CVE-2024-37146
    CVE-2024-37146: Flowise Cross-site Scripting Vulnerability
    2 Disclosedxss · flowise
    record AIR-2024-0157NVD ↗
  168. 2024-07-01
    CVE-2024-37145
    CVE-2024-37145: Flowise Cross-site Scripting Vulnerability
    2 Disclosedxss · flowise
    record AIR-2024-0156NVD ↗
  169. 2024-07-01
    CVE-2024-36423
    CVE-2024-36423: Flowise reflected cross-site scripting
    2 Disclosedxss · flowise
    record AIR-2024-0155NVD ↗
  170. 2024-07-01
    CVE-2024-36421
    CVE-2024-36421: Flowise CORS misconfiguration vulnerability
    2 Disclosedcors · flowise
    record AIR-2024-0154NVD ↗
  171. 2024-04-29
    CVE-2024-31621
    Flowise Remote Code Injection Vulnerability
    2 Disclosedcode-injection
    record AIR-2024-0101GitHub Advisory Database ↗

This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.