Advisoriesby Ibis
Flowise security advisories
114 advisories · 67 critical or high in 12 months · latest Oct 7
60 of 114 advisories
Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator BypassCVE-2026-73487fixed in 3.1.3Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via ChromiumCVE-2026-119978fixed in 3.1.3Flowise: information disclosureCVE-2026-70478fixed in 3.1.3Flowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityCVE-2026-70477fixed in 3.1.3Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing ManipulationCVE-2026-70476fixed in 3.1.3Flowise: missing authorizationCVE-2026-73603fixed in 3.1.4Flowise: Missing Authorization on Execution Update EndpointCVE-2026-70475fixed in 3.1.3Flowise: Cross-Workspace OAuth2 Credential Metadata LeakCVE-2026-70474fixed in 3.1.3Flowise: Incomplete Credential Redaction Exposes Secrets via APICVE-2026-73604fixed in 3.1.3Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert historyCVE-2026-70473fixed in 3.1.3Flowise: Cross-workspace credential IDOR in openai-assistants-vector-storeCVE-2026-70472fixed in 3.1.3Flowise: code injectionCVE-2026-69264fixed in 3.1.3Flowise: arbitrary file writeGHSA-88pr-878c-24wffixed in 3.1.3Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables DisclosureCVE-2026-70471fixed in 3.1.3Flowise: Pyodide validator Unicode homoglyph bypass leads to RCECVE-2026-70470fixed in 3.1.3Flowise: incomplete denylistCVE-2026-69263fixed in 3.1.3Flowise: improper authorizationCVE-2026-69262fixed in 3.1.3Flowise RCE via SQLite Record Manager NodeCVE-2026-69259fixed in 3.1.3Flowise: insecure direct object referenceCVE-2026-69258fixed in 3.1.3Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 AddressesCVE-2026-69257fixed in 3.1.3Flowise: Remote Code Execution Vulnerability in CSVAgentCVE-2026-69256fixed in 3.1.3Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection , Root Shell VerifiedCVE-2026-69255fixed in 3.1.3Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions OverrideCVE-2026-69254fixed in 3.1.3Flowise Sandbox Escape to RCECVE-2026-69253fixed in 3.1.3Flowise: missing authorizationCVE-2026-69252fixed in 3.1.3Flowise RCE via TypeORM DataSourceCVE-2026-69251fixed in 3.1.3Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret ExfiltrationCVE-2026-69250fixed in 3.1.3Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpointCVE-2026-73488fixed in 3.1.3Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected ChatflowsCVE-2026-56268fixed in 3.1.2Flowise: mass assignmentCVE-2026-56276fixed in 3.1.2Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpageCVE-2026-56277fixed in 3.1.2FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeoverCVE-2026-46480fixed in 3.1.2FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeoverCVE-2026-46479fixed in 3.1.2FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeoverCVE-2026-46478fixed in 3.1.2FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeoverCVE-2026-46477fixed in 3.1.2FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeoverCVE-2026-46476fixed in 3.1.2FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeoverCVE-2026-46475fixed in 3.1.2FlowiseAI: Vector Store No Permission ChecksCVE-2026-46444fixed in 3.1.2FlowiseAI Vulnerable to Credential Data LeakCVE-2026-46443fixed in 3.1.2FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox EscapeCVE-2026-46442fixed in 3.1.2FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource ReassignmentCVE-2026-46441fixed in 3.1.2Flowise has an MCP Security Bypass that Enables RCECVE-2026-56274fixed in 3.1.2FlowiseAI Exposes Basic Auth Credentials via APICVE-2026-46440fixed in 3.1.2FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow ReassignmentCVE-2026-42863fixed in 3.1.2FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource ReassignmentCVE-2026-42862fixed in 3.1.2FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource ReassignmentCVE-2026-42861fixed in 3.1.2Flowise: Bcrypt Password Hash ExposureCVE-2026-8026no fix yetFlowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityCVE-2026-41264fixed in 3.1.0Flowise: Airtable_Agent Code Injection Remote Code Execution VulnerabilityCVE-2026-41265fixed in 3.1.0Flowise: insecure direct object referenceCVE-2026-41279fixed in 3.1.0Flowise: information disclosureCVE-2026-41278fixed in 3.1.0Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)CVE-2026-41277fixed in 3.1.0Flowise: resetPassword Authentication Bypass VulnerabilityCVE-2026-41276fixed in 3.1.0Flowise: Cypher Injection in GraphCypherQAChainCVE-2026-41274fixed in 3.1.0Flowise: Password Reset Link Sent Over Unsecured HTTPCVE-2026-41275fixed in 3.1.0Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in FlowiseCVE-2026-41273fixed in 3.1.0Flowise: APIChain Prompt Injection SSRF in GET/POST API ChainsCVE-2026-41271fixed in 3.1.0Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)CVE-2026-41272fixed in 3.1.0Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function SandboxCVE-2026-41270fixed in 3.1.0Flowise: File Upload Validation Bypass in createAttachmentCVE-2026-41269fixed in 3.1.0