npm / flowise

Flowise: Cypher Injection in GraphCypherQAChain

Modified: 5/5/2026

Flowise Cross-site Scripting in api/v1/chatflows/id

Modified: 8/5/2024

Flowise Authentication Bypass vulnerability

Modified: 9/4/2024

Flowise: Weak Default Express Session Secret

Modified: 4/16/2026

Flowise OS command remote code execution

Modified: 8/18/2025

Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

Modified: 5/5/2026

FlowiseAI/Flosise has File Upload vulnerability

Modified: 12/16/2025

Flowise has Remote Code Execution vulnerability

Modified: 10/13/2025

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Modified: 5/5/2026

Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

Modified: 5/5/2026

Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

Modified: 5/5/2026

Flowise Unauthenticated Denial of Service (DoS) vulnerability

Modified: 8/27/2024

Flowise vulnerable to XSS

Modified: 10/13/2025

Flowise: Sensitive Data Leak in public-chatbotConfig

Modified: 5/5/2026

Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification

Modified: 5/20/2026

Flowise OverrideConfig security vulnerability

Modified: 11/21/2024

Flowise Missing Authentication on NVIDIA NIM Endpoints

Modified: 3/9/2026

Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

Modified: 5/5/2026

FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover

Modified: 6/9/2026

FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment

Modified: 6/9/2026

Flowise Cors Misconfiguration in packages/server/src/index.ts

Modified: 8/5/2024

Flowise has unsandboxed remote code execution via Custom MCP

Modified: 9/15/2025

FlowiseAI Flowise arbitrary file upload vulnerability

Modified: 3/5/2025

Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise

Modified: 5/5/2026

FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment

Modified: 6/9/2026

Flowise: Unauthenticated Information Disclosure of OAuth Secrets (Cleartext) via GET Request

Modified: 4/16/2026

Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Modified: 5/5/2026

Flowise vulnerable to code injection via api/v1

Modified: 8/2/2024

FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

Modified: 6/9/2026

FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover

Modified: 6/9/2026

FlowiseAI Pre-Auth Arbitrary Code Execution

Modified: 10/17/2025

FlowiseAI Vulnerable to Credential Data Leak

Modified: 6/9/2026

FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

Modified: 6/9/2026

Flowise Stored XSS vulnerability through logs in chatbot

Modified: 3/14/2026

Flowise Cross-site Scripting in /api/v1/chatflows-streaming/id

Modified: 8/5/2024

Flowise: Bcrypt Password Hash Exposure

Modified: 5/12/2026

Flowise allows arbitrary file write to RCE

Modified: 3/14/2025

Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel

Modified: 2/4/2026

Flowise has an Arbitrary File Read

Modified: 9/15/2025

FlowiseDB vulnerable to SQL Injection by authenticated users

Modified: 4/7/2025

Flowise Execute Flow function has an SSRF vulnerability

Modified: 4/16/2026

FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

Modified: 6/9/2026

Flowise: Code Injection in CSVAgent leads to Authenticated RCE

Modified: 5/5/2026

Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows

Modified: 5/20/2026

Flowise: Authenticated RCE Via MCP Adapters

Modified: 4/16/2026

Flowise: Weak Default JWT Secrets

Modified: 4/16/2026

Flowise: Parameter Override Bypass Remote Command Execution

Modified: 5/5/2026

Flowise has IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Modified: 3/9/2026

Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`.

Modified: 5/5/2026

Flowise: resetPassword Authentication Bypass Vulnerability

Modified: 5/5/2026

Flowise Cross-site Scripting in /api/v1/public-chatflows/id

Modified: 8/5/2024

Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access

Modified: 4/10/2026

Flowise Pre-auth Arbitrary File Upload

Modified: 3/13/2025

Flowise Path Injection at /api/v1/openai-assistants-file

Modified: 8/5/2024

FlowiseAI: Vector Store No Permission Checks

Modified: 6/11/2026

Flowise vulnerable to RCE via Dynamic function constructor injection

Modified: 10/6/2025

FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment

Modified: 6/9/2026

FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

Modified: 9/22/2025

Flowise is vulnerable to arbitrary file exposure through its ReadFileTool

Modified: 2/4/2026

Flowise has Arbitrary File Upload via MIME Spoofing

Modified: 3/9/2026

Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password Endpoint

Modified: 3/5/2026

Flowise is vulnerable to arbitrary file write through its WriteFileTool

Modified: 2/4/2026

Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting

Modified: 9/30/2024

Flowise: Weak Default Token Hash Secret

Modified: 4/16/2026

Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage

Modified: 5/20/2026

Flowise has an MCP Security Bypass that Enables RCE

Modified: 5/16/2026

Flowise Allows Mass Assignment in `/api/v1/leads` Endpoint

Modified: 3/9/2026

FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

Modified: 6/9/2026

FlowiseAI Exposes Basic Auth Credentials via API

Modified: 6/9/2026

Flowise has arbitrary file access due to missing chat flow id validation

Modified: 9/15/2025

Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

Modified: 5/13/2026

Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages

Modified: 10/29/2025

Flowise: File Upload Validation Bypass in createAttachment

Modified: 5/5/2026

Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

Modified: 5/5/2026

Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register)

Modified: 11/17/2025

Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

Modified: 5/5/2026

Flowise: Path Traversal in Vector Store basePath

Modified: 4/16/2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

Modified: 9/15/2025

Flowise has Authorization Bypass via Spoofed x-request-from Header

Modified: 3/9/2026

Flowise Cross-site Scripting in/api/v1/credentials/id

Modified: 8/5/2024

FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

Modified: 6/9/2026

Flowise has Insufficient Password Salt Rounds

Modified: 3/5/2026

FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment

Modified: 6/9/2026

Flowise: Password Reset Link Sent Over Unsecured HTTP

Modified: 5/5/2026

Flowise Fails to Invalidate Existing Sessions After Password Changes

Modified: 11/14/2025

Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

Modified: 5/5/2026