---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: 3.0.13 and earlier
---END_METADATA---

Description Summary:
Flowise uses a weak, hardcoded default secret for session management, enabling unauthenticated attackers to forge session cookies and hijack user accounts.

Executive Summary:
A critical authentication bypass vulnerability in Flowise allows attackers to forge session cookies due to the use of a weak, hardcoded default secret.

Vulnerability Details

CVE-ID: CVE-2026-56278

Affected Software: Flowise

Affected Versions: 3.0.13 and earlier

Vulnerability: The application falls back to a hardcoded string ("flowise") for the express-session middleware secret if the environment variable is not explicitly configured. This allows an unauthenticated remote attacker to craft valid, signed session cookies, effectively impersonating any user, including administrative accounts.

Business Impact

The ability to forge sessions grants an attacker full access to the Flowise platform, potentially exposing sensitive workflows, API keys, and configuration data. With a CVSS score of 9.1, this vulnerability poses a high risk to the confidentiality and integrity of organizational automation processes.

Remediation Plan

Immediate Action: Upgrade Flowise to version 3.1.0 or later and ensure the EXPRESS_SESSION_SECRET environment variable is set to a strong, unique, and random value.

Proactive Monitoring: Audit existing session logs for anomalous login activity or sessions originating from unexpected IP addresses.

Compensating Controls: Implement network-level access controls to restrict access to the Flowise management interface to authorized personnel only.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ease of cookie forgery makes the potential for exploitation high once the secret is known.

Analyst Recommendation

This vulnerability highlights the danger of default configurations in security-critical software. Administrators must upgrade their instances and strictly enforce the use of custom, high-entropy session secrets to prevent unauthorized account takeover and potential data exfiltration.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Before 3.1.2
---END_METADATA---

Description Summary:
Flowise versions before 3.1.2 are susceptible to OS command injection via the Custom MCP Server feature due to inadequate validation of command flags and file access restrictions.

Executive Summary:
An authenticated OS command injection vulnerability in Flowise allows users with standard accounts to execute arbitrary commands on the host server, posing a critical security risk.

Vulnerability Details

CVE-ID: CVE-2026-56274

Affected Software: Flowise Flowise

Affected Versions: Before 3.1.2

Vulnerability: The vulnerability exists in the Custom MCP Server feature, where insufficient blocklist validation and regex bypasses allow an authenticated attacker to execute arbitrary OS commands. This requires the attacker to have at least a standard Flowise account or API access with specific chatflow permissions.

Business Impact

With a CVSS score of 9.9, this vulnerability represents an extreme risk. An attacker gaining command execution on the host server could result in full system compromise, exfiltration of sensitive configuration data, and lateral movement within the network.

Remediation Plan

Immediate Action: Upgrade Flowise to version 3.1.2 or later to apply the necessary patches for command-flag validation and file access restrictions.

Proactive Monitoring: Review audit logs for suspicious activity involving the Custom MCP Server feature, specifically looking for unexpected command-line arguments or local file access attempts.

Compensating Controls: Restrict access to the Flowise administrative interface and API to trusted personnel only, and employ a Web Application Firewall (WAF) to inspect incoming traffic for command injection patterns.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jun 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the ease of exploitation for authenticated users, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this vulnerability, immediate remediation is mandatory. System administrators should prioritize updating the Flowise platform and auditing existing account permissions to ensure that only authorized users can interact with sensitive features like the Custom MCP Server.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability in Flowise before version 3 exists that requires immediate attention from users of the platform.

Executive Summary:
A high-severity vulnerability in versions of Flowise prior to 3 introduces significant security risks that necessitate immediate patching.

Vulnerability Details

CVE-ID: CVE-2026-56268

Affected Software: Flowise

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects Flowise prior to version 3. While technical specifics are currently limited, the nature of the flaw poses a substantial risk to the application's security posture and should be treated as a priority for remediation.

Business Impact

The CVSS score of 7.7 reflects a high-severity risk, indicating that successful exploitation could lead to unauthorized access, potential data exposure, or compromise of the platform's functionality. Organizations relying on Flowise for automated workflows must address this vulnerability to avoid service disruption and the potential compromise of sensitive data processed by the application.

Remediation Plan

Immediate Action: Upgrade Flowise to version 3 or the latest available release as recommended by the vendor.

Proactive Monitoring: Review application performance logs and audit trails for any anomalous behavior or unauthorized access attempts occurring within the Flowise environment.

Compensating Controls: Implement network segmentation and ensure the application is not exposed to the public internet without proper authentication and WAF protection.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing Flowise must treat this as a high-priority update. Administrators should verify their current version and upgrade to the latest release immediately to mitigate potential security risks and ensure the continued integrity of their automated workflows.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability exists within the Flowise drag-and-drop interface used for building customized large language model flows.

Executive Summary:
A high-severity vulnerability in the Flowise LLM workflow platform poses a significant risk to the integrity and confidentiality of integrated data environments.

Vulnerability Details

CVE-ID: CVE-2026-46479

Affected Software: Flowise Flowise

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the Flowise interface. Users should assume that any flaw in this component requires prompt remediation to prevent unauthorized access or system-level exploitation.

Business Impact

A CVSS score of 8.8 warrants immediate remediation efforts to prevent potential compromise of the Flowise environment. Failure to address this could lead to unauthorized access to sensitive data processed by the LLM, resulting in severe operational or reputational damage.

Remediation Plan

Immediate Action: Ensure the installation is updated to the latest vendor-provided release.

Proactive Monitoring: Maintain detailed logs of all administrative actions within the Flowise interface to identify any unauthorized configuration changes.

Compensating Controls: Restrict access to the Flowise management interface to authorized personnel only via VPN or secure gateway solutions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high severity, it is imperative to maintain a proactive posture by applying updates as soon as they become available. Regularly auditing the security configuration of the Flowise environment is recommended to minimize the attack surface.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability exists within the Flowise drag-and-drop interface used for building customized large language model flows.

Executive Summary:
A high-severity vulnerability in the Flowise LLM workflow platform poses a significant risk to the integrity and confidentiality of integrated data environments.

Vulnerability Details

CVE-ID: CVE-2026-46478

Affected Software: Flowise Flowise

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability involves an issue within the Flowise workflow interface. As with related entries, the flaw requires immediate attention to prevent unauthorized interaction with LLM orchestration components.

Business Impact

With a CVSS score of 8.8, this vulnerability indicates a high potential for impact, potentially allowing attackers to compromise LLM flow integrity. This could lead to unauthorized data processing or the injection of malicious instructions into the language model pipelines.

Remediation Plan

Immediate Action: Apply the latest security updates provided by the vendor immediately upon release to address the underlying vulnerability.

Proactive Monitoring: Monitor application logs for anomalous activity, particularly actions related to workflow creation or modification by non-authorized users.

Compensating Controls: Utilize Web Application Firewalls (WAF) to monitor and block potentially malicious payload structures targeting the Flowise interface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators should treat this vulnerability with high urgency. Ensure that the Flowise instance is not exposed to untrusted networks and apply all vendor-supplied patches promptly to secure the LLM infrastructure.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability exists within the Flowise drag-and-drop interface used for building customized large language model flows.

Executive Summary:
A high-severity vulnerability in the Flowise LLM workflow platform poses a significant risk to the integrity and confidentiality of integrated data environments.

Vulnerability Details

CVE-ID: CVE-2026-46477

Affected Software: Flowise Flowise

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability involves an issue within the Flowise workflow interface. While specific authentication requirements are currently pending further disclosure, similar flaws in low-code platforms often permit unauthorized execution or data access.

Business Impact

Successful exploitation of this flaw could result in unauthorized access to sensitive LLM data pipelines or the manipulation of workflow logic. Given the CVSS score of 8.8, this vulnerability represents a high risk that could lead to significant data exfiltration or service disruption if attackers gain control over LLM orchestration.

Remediation Plan

Immediate Action: Update the Flowise deployment to the latest version provided by the vendor as soon as an official security patch is released.

Proactive Monitoring: Review system and application access logs for unusual traffic patterns or unauthorized API requests directed at the Flowise interface.

Compensating Controls: Implement strict network access controls and utilize a Web Application Firewall (WAF) to filter suspicious requests targeting the workflow builder.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing Flowise must prioritize the monitoring of vendor security channels for patch availability. Due to the high CVSS score, it is recommended to isolate the service from public-facing networks until a verified update is applied to mitigate the risk of unauthorized workflow manipulation.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Prior to version 3.1.2
---END_METADATA---

Description Summary:
A mass-assignment vulnerability in Flowise allows authenticated users to move assistants between workspaces, resulting in cross-workspace takeover.

Executive Summary:
A mass-assignment flaw in the Flowise platform allows authenticated users to hijack assistants from other workspaces, leading to unauthorized data access and flow manipulation.

Vulnerability Details

CVE-ID: CVE-2026-46475

Affected Software: Flowise

Affected Versions: Prior to version 3.1.2

Vulnerability: This is a mass-assignment vulnerability occurring during the creation or update of assistants. By manipulating the workspaceId in a PUT request, an authenticated user can reassign an assistant to a workspace they control.

Business Impact

With a CVSS score of 8.8, this vulnerability allows for significant unauthorized access within multi-tenant or collaborative environments. The potential for cross-workspace takeover could result in the compromise of sensitive LLM flows and proprietary data, severely impacting organizational security posture.

Remediation Plan

Immediate Action: Update the Flowise platform to version 3.1.2 or later to correct the mass-assignment vulnerability.

Proactive Monitoring: Review access and API logs for unusual PUT requests or unauthorized attempts to modify workspace associations.

Compensating Controls: Implement strict role-based access control (RBAC) and validate that users only have permissions within their intended workspace to limit the impact of such flaws.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability to manipulate workspace associations represents a critical authorization bypass. Administrators must update to the latest version immediately to ensure that workspace isolation is properly enforced and to prevent unauthorized access to sensitive LLM flows.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Prior to 3.1.0
---END_METADATA---

Description Summary:
Flowise prior to 3.1.0 is vulnerable to OS command injection due to unsafe serialization of stdio commands in the MCP adapter, allowing authenticated attackers to execute arbitrary commands.

Executive Summary:
An authenticated command injection vulnerability in Flowise allows attackers to execute arbitrary code on the underlying host OS.

Vulnerability Details

CVE-ID: CVE-2026-40933

Affected Software: Flowise

Affected Versions: Prior to 3.1.0

Vulnerability: The vulnerability exists in the "Custom MCP" configuration interface, where insufficient input sanitization allows an authenticated attacker to inject malicious arguments into stdio commands, bypassing existing validation checks.

Business Impact

Successful exploitation grants an attacker full control over the underlying server, enabling data exfiltration, ransomware deployment, or complete system takeover. With a CVSS score of 9.9, this vulnerability represents a critical threat to the confidentiality, integrity, and availability of the host environment.

Remediation Plan

Immediate Action: Upgrade Flowise to version 3.1.0 or later immediately to address the command injection flaw.

Proactive Monitoring: Audit logs for suspicious process creation or unusual command executions originating from the Flowise service account.

Compensating Controls: Implement strict network segmentation and ensure the application runs with the least-privilege principle to contain potential breaches.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the ease of command injection, the potential for exploitation is high.

Analyst Recommendation

This vulnerability presents a severe risk to infrastructure integrity. Administrators should apply the 3.1.0 update immediately and conduct a thorough review of the application's configuration to ensure no malicious MCP servers were added prior to the patch.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
An unauthenticated path traversal vulnerability in the Flowise document-store loader allows attackers to write arbitrary files to the filesystem, facilitating remote code execution.

Executive Summary:
A critical, unauthenticated path traversal vulnerability in Flowise allows attackers to achieve remote code execution by overwriting sensitive system files.

Vulnerability Details

CVE-ID: CVE-2025-71338

Affected Software: Flowise Flowise

Affected Versions: See vendor advisory

Vulnerability: This is a path traversal vulnerability located in the /api/v1/document-store/loader/process endpoint. By providing unsanitized fileName parameters containing directory traversal sequences, an unauthenticated attacker can overwrite critical application files to trigger arbitrary code execution.

Business Impact

With a CVSS score of 10.0, this represents the highest level of risk, as it allows unauthenticated remote attackers to gain control over the host environment. Successful exploitation can lead to total system compromise, unauthorized data access, and potential lateral movement within the network.

Remediation Plan

Immediate Action: Apply the latest security update provided by Flowise to disable the vulnerable file write path.

Proactive Monitoring: Inspect filesystem integrity for unauthorized changes to critical configuration files like package.json and monitor API logs for requests containing suspicious directory traversal patterns (e.g., ../).

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block requests containing path traversal sequences directed at the document-store API endpoint.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the unauthenticated nature of this vulnerability and its critical impact, immediate remediation is required. Administrators should verify their current version against the vendor's security advisory and apply the necessary patches without delay to prevent unauthorized system access.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
Flowise versions prior to 3 are susceptible to an unspecified security vulnerability.

Executive Summary:
Flowise versions released prior to version 3 contain a security flaw that potentially exposes the application to significant unauthorized access risks.

Vulnerability Details

CVE-ID: CVE-2025-71337

Affected Software: Flowise Flowise

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves an unspecified flaw in the Flowise software. Given the lack of granular technical detail, the authentication requirements remain indeterminate; however, users should assume a high-risk posture until further vendor clarification.

Business Impact

The identified vulnerability carries a CVSS score of 8.3, classifying it as a High-severity issue. Successful exploitation could lead to unauthorized system access, potential data exfiltration, or service disruption, significantly impacting the confidentiality and integrity of the organization’s AI workflow deployments.

Remediation Plan

Immediate Action: Upgrade to version 3 or the latest available release provided by the vendor to remediate the vulnerability.

Proactive Monitoring: Review application access logs for unusual activity patterns or unauthorized authentication attempts originating from anomalous IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated signatures to filter malicious traffic directed at the Flowise instance.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The high CVSS score necessitates immediate attention from security teams. Organizations should prioritize updating Flowise to the latest version immediately to mitigate the risk of potential exploitation.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: 2.2.7-patch.1 and earlier
---END_METADATA---

Description Summary:
Flowise contains an unsandboxed remote code execution vulnerability in the Custom MCP feature, allowing unauthenticated attackers to execute arbitrary OS commands.

Executive Summary:
An unauthenticated remote code execution vulnerability in the Flowise Custom MCP feature allows attackers to gain full control over the platform container or underlying host server.

Vulnerability Details

CVE-ID: CVE-2025-71336

Affected Software: Flowise

Affected Versions: 2.2.7-patch.1 and earlier

Vulnerability: The Custom MCP feature lacks proper sandboxing and executes OS commands based on user-supplied input. Due to the lack of enforced authentication in default installations, an unauthenticated attacker can send crafted JSON payloads to execute arbitrary commands.

Business Impact

The CVSS score of 9.8 highlights the critical severity of this flaw. Because the vulnerability allows for arbitrary command execution at the OS level, an attacker can fully compromise the application container or the host server, leading to lateral movement, data breaches, and total loss of confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Upgrade to Flowise version 3.0.6 or higher and ensure that authentication (FLOWISE_USERNAME and FLOWISE_PASSWORD) is correctly configured.

Proactive Monitoring: Monitor system logs for unauthorized processes spawned by the Flowise application and review requests to the /api/v1/node-load-method/customMCP endpoint.

Compensating Controls: Ensure the application is running with the principle of least privilege, ideally within an isolated container with restricted system access to minimize the impact of command execution.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is exceptionally dangerous due to its ease of exploitation and the level of access granted to attackers. It is imperative to update the software and enforce strong administrative authentication immediately to prevent unauthorized command execution on the host system.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
Flowise versions prior to 3 are susceptible to a security vulnerability that may expose the application to unauthorized access or manipulation.

Executive Summary:
A critical vulnerability in Flowise versions prior to 3 presents a significant risk of unauthorized system compromise and potential data exposure.

Vulnerability Details

CVE-ID: CVE-2025-71335

Affected Software: Flowise Flowise

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects Flowise prior to version 3, representing a flaw in the application's security architecture. The authentication requirements remain unconfirmed; however, the nature of the flaw suggests potential for unauthorized access.

Business Impact

The identified vulnerability carries a CVSS score of 8.1, categorizing it as a High-severity risk. Successful exploitation could lead to unauthorized access to sensitive workflows, potential data exfiltration, and significant disruption to business operations relying on Flowise for automation.

Remediation Plan

Immediate Action: Upgrade to Flowise version 3 or the latest available secure version immediately to mitigate this risk.

Proactive Monitoring: Review application access logs for unusual patterns, unauthorized login attempts, or anomalous behavior originating from internal or external sources.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to filter potentially malicious traffic targeting the Flowise instance until a patch can be applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the high CVSS score, the potential for exploitation is significant and requires prompt attention.

Analyst Recommendation

Given the High severity of this vulnerability, organizations must prioritize upgrading their Flowise installations. We recommend immediate verification of current versions and the scheduling of maintenance windows to apply the necessary security updates to prevent potential unauthorized access.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: 2.2.8 and earlier
---END_METADATA---

Description Summary:
Flowise contains an arbitrary file read and write vulnerability due to missing validation on input parameters, allowing unauthenticated attackers to achieve remote code execution.

Executive Summary:
An unauthenticated arbitrary file access vulnerability in Flowise enables attackers to read or write files, creating a direct path to remote code execution and full system takeover.

Vulnerability Details

CVE-ID: CVE-2025-71334

Affected Software: Flowise

Affected Versions: 2.2.8 and earlier

Vulnerability: The application fails to validate the chatflowId and chatId parameters, permitting path-traversal attacks. An unauthenticated attacker can exploit this to write malicious files or read sensitive configuration files via the /api/v1/ endpoints.

Business Impact

With a CVSS score of 9.8, this vulnerability represents an extreme risk to infrastructure. An attacker can write executable files to the server, leading to arbitrary code execution, which may result in full system compromise, data theft, and unauthorized access to integrated AI workflows or connected databases.

Remediation Plan

Immediate Action: Upgrade Flowise to version 3.0.6 or higher immediately to implement necessary path validation controls.

Proactive Monitoring: Audit access logs for the /api/v1/chatflows and /api/v1/openai-assistants-file/download endpoints for suspicious path-traversal strings (e.g., ../).

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block path-traversal sequences and restrict access to the affected API endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability to perform arbitrary file operations without authentication makes this a high-priority risk. Administrators must apply the update to version 3.0.6 immediately and review server logs for signs of unauthorized file access or modification.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Through 2.2.4
---END_METADATA---

Description Summary:
Flowise contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint, allowing attackers to achieve remote code execution via path traversal.

Executive Summary:
An unauthenticated arbitrary file upload vulnerability in Flowise allows remote attackers to execute malicious code, leading to total server compromise.

Vulnerability Details

CVE-ID: CVE-2025-71333

Affected Software: Flowise Flowise

Affected Versions: Through 2.2.4

Vulnerability: This vulnerability involves a lack of input validation within the /api/v1/attachments endpoint. An unauthenticated attacker can exploit path traversal via chatId and chatflowId parameters to upload files to unauthorized directories.

Business Impact

The ability to upload arbitrary files to a server facilitates Remote Code Execution (RCE), which grants an attacker full control over the application environment. Given the CVSS score of 9.3, this flaw poses a severe risk of data exfiltration, service disruption, and lateral movement within the corporate network.

Remediation Plan

Immediate Action: Upgrade Flowise to the latest patched version immediately to remediate the vulnerable file upload logic.

Proactive Monitoring: Monitor server logs for suspicious POST requests to /api/v1/attachments and inspect file system directories for unexpected executable files or non-standard file types.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block requests containing path traversal sequences (e.g., ../) in the chatId or chatflowId parameters.

Exploitation Status

Public Exploit Available: N/A

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical vulnerability that provides an unauthenticated vector for full system compromise. Organizations running affected versions of Flowise must prioritize the application of vendor-supplied patches to eliminate this remote code execution risk.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Flowise before 3.0.10
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Flowise before 3.0.10 contains an unverified password change vulnerability allowing authenticated users to modify account passwords without providing the current password.

Executive Summary:
A critical vulnerability in Flowise before 3.0.10 allows authenticated users to bypass password validation, creating a significant risk of full account takeover.

Vulnerability Details

CVE-ID: CVE-2025-71328

Affected Software: Flowise Flowise

Affected Versions: Flowise before 3.0.10

Vulnerability: This is an authentication-related flaw where an authenticated user can change their account password without supplying the current password, potentially leading to full account takeover if an attacker hijacks or coerces an authenticated session.

Business Impact

The vulnerability carries a CVSS score of 8.3, indicating a high level of risk. A successful exploit could lead to unauthorized account takeover, resulting in complete compromise of the affected user's data and potential lateral movement within the Flowise environment.

Remediation Plan

Immediate Action: Upgrade to Flowise version 3.0.10 or later immediately to apply the necessary security controls for password changes.

Proactive Monitoring: Review audit logs for suspicious account modification activity or unusual session behavior that could indicate unauthorized password changes.

Compensating Controls: Implement strict session management policies and ensure multi-factor authentication (MFA) is enforced wherever possible to mitigate the risk of session hijacking.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential for complete account takeover, organizations should prioritize the update to Flowise 3.0.10. Ensuring that all administrative and user sessions are authenticated and monitored is essential to preventing the exploitation of this vulnerability.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
An authentication bypass vulnerability in the Flowise /api/v1/account/register endpoint allows unauthenticated attackers to create unauthorized administrative accounts.

Executive Summary:
An authentication bypass in Flowise allows unauthenticated attackers to register arbitrary accounts, granting full API access and compromising system security.

Vulnerability Details

CVE-ID: CVE-2025-71327

Affected Software: Flowise Flowise

Affected Versions: See vendor advisory

Vulnerability: The /api/v1/account/register endpoint lacks necessary authentication checks, permitting any remote, unauthenticated user to successfully register an account. This grants the attacker full API access to the underlying application.

Business Impact

With a CVSS score of 9.1, this vulnerability allows unauthorized actors to gain administrative-level access to the Flowise system. This leads to complete loss of confidentiality and integrity, as attackers can manage workflows, access sensitive data, and potentially pivot to other integrated systems.

Remediation Plan

Immediate Action: Apply the latest security update from the vendor to enforce proper authentication on the registration endpoint.

Proactive Monitoring: Audit the user account database for unauthorized or suspicious registrations created since the deployment of the affected version.

Compensating Controls: Restrict access to the /api/v1/account/register endpoint via network-level controls or a WAF if the registration feature is not required for public use.

Exploitation Status

Public Exploit Available: N/A

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability for an unauthenticated user to register an account constitutes a critical security failure. Administrators should verify current user lists immediately and deploy the vendor's patch to prevent further unauthorized account creation.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Before 2.1.4
---END_METADATA---

Description Summary:
Flowise versions before 2.1.4 are vulnerable to remote code execution and sandbox escape via an insecure overrideConfig option in the Chainflow execution process.

Executive Summary:
An unauthenticated remote code execution vulnerability in Flowise allows attackers to achieve full system compromise via insecure configuration injection.

Vulnerability Details

CVE-ID: CVE-2024-58351

Affected Software: Flowise Flowise

Affected Versions: Before 2.1.4

Vulnerability: This vulnerability stems from an insecure implementation of the overrideConfig option, which lacks an allow-list for permitted variables and relies on an insufficient vm2 sandbox. Attackers can leverage this to execute arbitrary code, perform SSRF, or exfiltrate sensitive server-side data without prior authentication.

Business Impact

With a CVSS score of 9.8, this critical vulnerability poses a severe risk of total server compromise. Successful exploitation allows an attacker to execute arbitrary commands, potentially leading to unauthorized data access, complete loss of confidentiality and integrity, and significant operational downtime for organizations relying on Flowise for workflow automation.

Remediation Plan

Immediate Action: Upgrade Flowise to version 2.1.4 or later immediately to remove the vulnerable configuration injection path.

Proactive Monitoring: Review backend Prediction API logs for anomalous overrideConfig payloads or unexpected execution patterns that deviate from standard workflow triggers.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict rules to inspect and filter incoming JSON payloads for suspicious overrideConfig parameters until the patch is applied.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 20, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the severity of the remote code execution risk, organizations must prioritize patching Flowise instances to version 2.1.4. Failure to remediate this vulnerability leaves the underlying infrastructure exposed to complete takeover by unauthenticated remote actors.