A critical authorization bypass vulnerability in Flowise allows authenticated attackers to access and manipulate data across restricted workspaces, posing a severe risk to data confidentiality and integrity.

This vulnerability is an insecure direct object reference (CWE-639) occurring within the OpenAI Assistants integration. Authenticated attackers can bypass workspace ownership checks by supplying arbitrary credential UUIDs to endpoints, granting unauthorized access to cross-workspace metadata, file listings, and vector stores.

The ability for an authenticated user to access sensitive information across workspaces constitutes a major security failure. With a CVSS score of 9.9, this flaw enables lateral movement and data exfiltration, potentially exposing proprietary AI configurations, sensitive files, and vector data to unauthorized parties.

Immediate Action: Review vendor documentation for the availability of a security update and apply it immediately to all production instances.

Proactive Monitoring: Monitor server logs for suspicious API requests involving credential UUIDs that originate from unauthorized or unexpected user sessions.

Compensating Controls: Implement strict network-level access controls to restrict access to the Flowise management interface to only authorized personnel until a patch is applied.

Public Exploit Available: Unknown

Given the critical severity of this authorization bypass, administrators must prioritize identifying and patching affected Flowise deployments. Organizations should perform a thorough audit of their workspace data to determine if any unauthorized access has occurred while this vulnerability remained unpatched.