Vulnerabilities in FlowiseAI
120 resultsCVE-2026-70636HIGHFlowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh EndpointEPSS 0.7%CVE-2026-69263HIGHFlowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)EPSS 0.7%CVE-2026-73486CRITICALFlowise before 3.1.3 Code Injection via CSV Agent customReadCSVEPSS 0.7%CVE-2026-73483CRITICALFlowise before 3.1.3 Sandbox Escape via PuppeteerEPSS 0.6%CVE-2026-70478CRITICALFlowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected serviceEPSS 0.6%CVE-2026-41138HIGHFlowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.EPSS 0.6%CVE-2026-69255CRITICALFlowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell VerifiedEPSS 0.6%CVE-2026-73485CRITICALFlowise before 3.1.3 Remote Code Execution via Airtable AgentEPSS 0.6%CVE-2026-69250HIGHFlowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret ExfiltrationEPSS 0.6%CVE-2026-41265CRITICALFlowise: Airtable_Agent Code Injection Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-9148CRITICALFlowise Stored Cross-Site ScriptingEPSS 0.6%CVE-2026-69252HIGHFlowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organizationEPSS 0.5%CVE-2026-30820HIGHFlowise Authorization Bypass via Spoofed x-request-from HeaderEPSS 0.5%CVE-2026-69262HIGHFlowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow typeEPSS 0.5%CVE-2026-70476HIGHFlowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing ManipulationEPSS 0.5%CVE-2026-70472HIGHFlowise: Cross-workspace credential IDOR in openai-assistants-vector-storeEPSS 0.5%CVE-2026-41274CRITICALFlowise: Cypher Injection in GraphCypherQAChainEPSS 0.5%CVE-2026-12821MEDIUMFlowiseAI Flowise S3 Document Loader S3.ts path traversalEPSS 0.5%CVE-2026-90535MEDIUMFlowise before 3.1.4 Denial of Service via text-to-speech/abortEPSS 0.5%CVE-2026-67622HIGHFlowise 3.1.4 IDOR in OpenAI Assistants IntegrationEPSS 0.5%