Vulnerabilidades en FlowiseAI
120 resultadosCVE-2026-41267HIGHFlowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization AssociationEPSS 0.3%CVE-2026-73603MEDIUMFlowise before 3.1.4 Credential Abuse via Text-to-SpeechEPSS 0.3%CVE-2026-46444HIGHFlowise: Vector Store No Permission ChecksEPSS 0.3%CVE-2026-119978CRITICALFlowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStoreEPSS 0.3%CVE-2026-42863HIGHFlowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow ReassignmentEPSS 0.3%CVE-2026-41273HIGHFlowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public ChatflowEPSS 0.3%CVE-2026-100609HIGHFlowise through 3.1.4 Insecure Direct Object Reference via CredentialEPSS 0.3%CVE-2026-8027MEDIUMFlowiseAI Flowise User Controller authorizationEPSS 0.3%CVE-2026-46441HIGHFlowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource ReassignmentEPSS 0.3%CVE-2026-100605HIGHFlowise through 3.1.4 Missing Authorization via Chat Message RoutesEPSS 0.3%CVE-2026-46443HIGHFlowise: Credential Data LeakEPSS 0.3%CVE-2026-41279HIGHFlowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentialsEPSS 0.3%CVE-2026-8026MEDIUMFlowiseAI Flowise API Response account.service.ts login information disclosureEPSS 0.3%CVE-2026-41272HIGHFlowise: SSRF Protection Bypass (TOCTOU & Default Insecure)EPSS 0.3%CVE-2026-42861HIGHFlowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource ReassignmentEPSS 0.3%CVE-2026-46440HIGHFlowise: Basic Auth Credentials Exposed via APIEPSS 0.3%CVE-2026-41270HIGHFlowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function SandboxEPSS 0.2%CVE-2026-41271HIGHFlowise: APIChain Prompt Injection SSRF in GET/POST API ChainsEPSS 0.2%CVE-2026-42862HIGHFlowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource ReassignmentEPSS 0.2%CVE-2026-41275HIGHFlowise: Password Reset Link Sent Over Unsecured HTTPEPSS 0.2%