{"items":[{"id":"CVE-2026-119978","published":"2026-10-30T17:28:31.216Z","updated":"2026-11-06T16:33:02.320Z","title":"Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2026-100610","published":"2026-09-26T13:22:52.636Z","updated":"2026-09-28T19:07:04.058Z","title":"Flowise through 3.1.4 Missing Authorization via upsert-history","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2026-100609","published":"2026-09-26T13:22:51.940Z","updated":"2026-09-30T12:50:05.029Z","title":"Flowise through 3.1.4 Insecure Direct Object Reference via Credential","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2026-100608","published":"2026-09-26T13:22:51.224Z","updated":"2026-10-05T15:57:31.978Z","title":"Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00348,"kevAdded":null},{"id":"CVE-2026-100607","published":"2026-09-26T13:22:50.537Z","updated":"2026-09-28T17:07:58.552Z","title":"Flowise through 3.1.4 Authentication Bypass via Email-Only SSO","severity":"CRITICAL","score":9.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2026-100606","published":"2026-09-26T13:22:49.835Z","updated":"2026-09-28T19:10:36.679Z","title":"Flowise through 3.1.4 Authentication Bypass via SSO Email Match","severity":"CRITICAL","score":9.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2026-100605","published":"2026-09-26T13:22:49.124Z","updated":"2026-09-30T12:48:59.289Z","title":"Flowise through 3.1.4 Missing Authorization via Chat Message Routes","severity":"HIGH","score":7.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00273,"kevAdded":null},{"id":"CVE-2026-91938","published":"2026-09-15T15:18:00.389Z","updated":"2026-09-17T19:28:50.908Z","title":"Flowise before 3.1.4 Server-Side Request Forgery via document loaders","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2026-91937","published":"2026-09-15T15:17:59.687Z","updated":"2026-09-15T17:02:01.493Z","title":"Flowise before 3.1.4 NoSQL Injection via sessionId","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2026-91936","published":"2026-09-15T15:17:59.008Z","updated":"2026-09-17T14:50:54.451Z","title":"Flowise before 3.1.4 Script Injection via Docker Workflows","severity":"HIGH","score":8.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2026-91935","published":"2026-09-15T15:17:58.325Z","updated":"2026-09-20T00:35:29.975Z","title":"Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2026-91934","published":"2026-09-15T15:17:57.643Z","updated":"2026-09-15T15:45:42.946Z","title":"Flowise before 3.1.4 Remote Code Execution via SQL Database Chain","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00737,"kevAdded":null},{"id":"CVE-2026-91933","published":"2026-09-15T15:17:56.954Z","updated":"2026-09-17T19:28:56.360Z","title":"Flowise before 3.1.4 Authorization Bypass via openai-realtime","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2026-91932","published":"2026-09-15T15:17:56.278Z","updated":"2026-09-15T16:07:11.412Z","title":"Flowise before 3.1.4 Remote Code Execution via cwd Parameter","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2026-91931","published":"2026-09-15T15:17:55.607Z","updated":"2026-09-17T14:49:53.465Z","title":"Flowise before 3.1.4 Remote Code Execution via Custom MCP npx","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2026-91930","published":"2026-09-15T15:17:54.942Z","updated":"2026-09-20T00:35:30.161Z","title":"Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2026-91929","published":"2026-09-15T15:17:54.262Z","updated":"2026-09-15T15:44:41.985Z","title":"Flowise before 3.1.4 Cross-Tenant Authorization Bypass","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2026-90580","published":"2026-09-13T19:15:09.741Z","updated":"2026-09-16T14:14:47.799Z","title":"FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery","severity":"MEDIUM","score":5.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2026-90535","published":"2026-09-12T12:08:44.062Z","updated":"2026-09-14T16:04:39.559Z","title":"Flowise before 3.1.4 Denial of Service via text-to-speech/abort","severity":"MEDIUM","score":6.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2026-90534","published":"2026-09-12T12:08:43.354Z","updated":"2026-09-14T18:16:57.345Z","title":"Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method","severity":"MEDIUM","score":6.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2026-90533","published":"2026-09-12T12:08:42.638Z","updated":"2026-09-14T18:29:22.757Z","title":"Flowise before 3.1.4 Broken Access Control via organizationuser","severity":"MEDIUM","score":6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-73604","published":"2026-08-13T11:28:10.144Z","updated":"2026-08-13T14:52:32.624Z","title":"Flowise before 3.1.3 Credential Exposure via API","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-73603","published":"2026-08-13T11:28:09.428Z","updated":"2026-08-14T22:27:58.527Z","title":"Flowise before 3.1.4 Credential Abuse via Text-to-Speech","severity":"MEDIUM","score":6.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2026-73602","published":"2026-08-13T11:28:08.765Z","updated":"2026-08-13T12:46:56.747Z","title":"Flowise before 3.1.3 Sandbox Escape to RCE","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00826,"kevAdded":null},{"id":"CVE-2026-73601","published":"2026-08-13T11:28:08.066Z","updated":"2026-08-14T20:18:44.625Z","title":"Flowise before 3.1.3 Remote Code Execution via Custom MCP","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.01099,"kevAdded":null},{"id":"CVE-2026-73488","published":"2026-08-13T11:28:07.407Z","updated":"2026-08-13T14:51:27.647Z","title":"Flowise before 3.1.3 IDOR via customer-default-source endpoint","severity":"MEDIUM","score":6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2026-73487","published":"2026-08-13T11:28:06.752Z","updated":"2026-08-14T22:26:48.945Z","title":"Flowise before 3.1.3 Prompt Injection RCE via CSV Agent","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00961,"kevAdded":null},{"id":"CVE-2026-73486","published":"2026-08-13T11:28:06.103Z","updated":"2026-08-13T12:45:11.509Z","title":"Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2026-73485","published":"2026-08-13T11:28:05.422Z","updated":"2026-08-14T20:18:51.372Z","title":"Flowise before 3.1.3 Remote Code Execution via Airtable Agent","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00597,"kevAdded":null},{"id":"CVE-2026-73484","published":"2026-08-13T11:28:04.728Z","updated":"2026-08-13T14:47:27.621Z","title":"Flowise before 3.1.3 Sandbox Escape via Pandas Methods","severity":"HIGH","score":8.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2026-73483","published":"2026-08-13T11:28:04.025Z","updated":"2026-08-14T22:25:36.593Z","title":"Flowise before 3.1.3 Sandbox Escape via Puppeteer","severity":"CRITICAL","score":9.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00621,"kevAdded":null},{"id":"CVE-2026-71962","published":"2026-08-10T18:26:18.577Z","updated":"2026-08-14T16:51:51.001Z","title":"Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00683,"kevAdded":null},{"id":"CVE-2026-67620","published":"2026-08-08T16:03:39.904Z","updated":"2026-08-14T16:51:04.430Z","title":"Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List","severity":"MEDIUM","score":6.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2026-70636","published":"2026-08-06T21:31:55.768Z","updated":"2026-08-14T16:51:36.780Z","title":"Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00663,"kevAdded":null},{"id":"CVE-2026-67622","published":"2026-08-06T21:31:34.185Z","updated":"2026-08-14T16:51:05.681Z","title":"Flowise 3.1.4 IDOR in OpenAI Assistants Integration","severity":"HIGH","score":8.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2026-67621","published":"2026-08-06T21:31:13.451Z","updated":"2026-08-14T16:51:05.045Z","title":"Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints","severity":"HIGH","score":7.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2026-70478","published":"2026-08-04T19:37:22.020Z","updated":"2026-08-05T19:05:33.447Z","title":"Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service","severity":"CRITICAL","score":9.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00615,"kevAdded":null},{"id":"CVE-2026-70477","published":"2026-08-04T19:29:14.796Z","updated":"2026-08-05T13:51:57.817Z","title":"Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00814,"kevAdded":null},{"id":"CVE-2026-70476","published":"2026-08-04T19:23:57.040Z","updated":"2026-08-05T14:51:23.779Z","title":"Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation","severity":"HIGH","score":8.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2026-70475","published":"2026-08-04T19:18:44.280Z","updated":"2026-08-04T19:37:54.504Z","title":"Flowise: Missing Authorization on Execution Update Endpoint","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2026-70474","published":"2026-08-04T18:01:01.722Z","updated":"2026-08-05T14:29:21.131Z","title":"Flowise: Cross-Workspace OAuth2 Credential Metadata Leak","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00477,"kevAdded":null},{"id":"CVE-2026-70473","published":"2026-08-04T17:56:50.437Z","updated":"2026-08-04T19:32:09.779Z","title":"Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history","severity":"HIGH","score":8.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2026-70472","published":"2026-08-04T17:46:05.452Z","updated":"2026-08-05T15:01:55.377Z","title":"Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00515,"kevAdded":null},{"id":"CVE-2026-70471","published":"2026-08-04T17:43:29.296Z","updated":"2026-08-04T19:17:49.145Z","title":"Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-70470","published":"2026-08-04T17:30:54.176Z","updated":"2026-08-04T19:51:28.378Z","title":"Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE","severity":"CRITICAL","score":9.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00972,"kevAdded":null},{"id":"CVE-2026-69264","published":"2026-08-04T17:22:36.676Z","updated":"2026-08-04T17:53:00.329Z","title":"Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation","severity":"CRITICAL","score":9.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.01112,"kevAdded":null},{"id":"CVE-2026-69263","published":"2026-08-04T16:54:36.893Z","updated":"2026-08-04T17:20:39.789Z","title":"Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2026-69262","published":"2026-08-04T16:50:12.612Z","updated":"2026-08-05T13:43:57.741Z","title":"Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-69259","published":"2026-08-04T16:05:19.426Z","updated":"2026-08-04T17:44:16.482Z","title":"Flowise RCE via SQLite Record Manager Node","severity":"CRITICAL","score":9.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00821,"kevAdded":null},{"id":"CVE-2026-69258","published":"2026-08-04T15:56:06.756Z","updated":"2026-08-05T14:59:55.132Z","title":"Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API","severity":"HIGH","score":8.8,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00667,"kevAdded":null},{"id":"CVE-2026-69257","published":"2026-08-04T15:51:47.700Z","updated":"2026-08-04T16:36:51.647Z","title":"Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-69256","published":"2026-08-04T15:45:55.039Z","updated":"2026-08-05T13:41:04.093Z","title":"Flowise: Remote Code Execution Vulnerability in CSVAgent","severity":"CRITICAL","score":9.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0101,"kevAdded":null},{"id":"CVE-2026-69255","published":"2026-08-04T15:39:39.166Z","updated":"2026-08-04T19:52:22.140Z","title":"Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified","severity":"CRITICAL","score":9.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00602,"kevAdded":null},{"id":"CVE-2026-69254","published":"2026-08-04T15:28:49.651Z","updated":"2026-08-04T17:45:10.631Z","title":"Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override","severity":"CRITICAL","score":9.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00691,"kevAdded":null},{"id":"CVE-2026-69253","published":"2026-08-04T15:13:39.181Z","updated":"2026-08-05T14:42:10.411Z","title":"Flowise Sandbox Escape to RCE","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00664,"kevAdded":null},{"id":"CVE-2026-69252","published":"2026-08-04T14:53:59.791Z","updated":"2026-08-04T16:43:11.797Z","title":"Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization","severity":"HIGH","score":7.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2026-69251","published":"2026-08-04T14:27:55.102Z","updated":"2026-08-04T15:35:08.974Z","title":"Flowise RCE via TypeORM DataSource","severity":"CRITICAL","score":9,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.02742,"kevAdded":null},{"id":"CVE-2026-69250","published":"2026-08-04T14:20:35.395Z","updated":"2026-08-04T19:52:53.398Z","title":"Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration","severity":"HIGH","score":8.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2026-12821","published":"2026-06-21T23:15:08.186Z","updated":"2026-06-22T10:22:43.162Z","title":"FlowiseAI Flowise S3 Document Loader S3.ts path traversal","severity":"MEDIUM","score":5.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2026-46480","published":"2026-06-08T15:32:15.839Z","updated":"2026-06-08T16:17:04.899Z","title":"Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-46479","published":"2026-06-08T15:32:03.907Z","updated":"2026-06-08T15:50:51.866Z","title":"Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-46478","published":"2026-06-08T15:31:55.478Z","updated":"2026-06-09T15:33:21.250Z","title":"Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2026-46477","published":"2026-06-08T15:31:48.952Z","updated":"2026-06-09T14:35:42.983Z","title":"Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-46476","published":"2026-06-08T15:31:32.623Z","updated":"2026-06-08T16:27:17.142Z","title":"Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-46475","published":"2026-06-08T15:31:09.210Z","updated":"2026-06-08T16:20:06.843Z","title":"Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-46443","published":"2026-06-08T15:30:59.580Z","updated":"2026-06-09T15:30:52.686Z","title":"Flowise: Credential Data Leak","severity":"HIGH","score":7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-46442","published":"2026-06-08T15:30:48.999Z","updated":"2026-06-09T14:35:49.756Z","title":"Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape","severity":"CRITICAL","score":9.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.32998,"kevAdded":null},{"id":"CVE-2026-46441","published":"2026-06-08T15:30:36.357Z","updated":"2026-06-08T16:28:12.422Z","title":"Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2026-46440","published":"2026-06-08T15:29:40.724Z","updated":"2026-06-08T19:18:43.370Z","title":"Flowise: Basic Auth Credentials Exposed via API","severity":"HIGH","score":7.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2026-42863","published":"2026-06-08T15:29:24.966Z","updated":"2026-06-08T16:22:46.285Z","title":"Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2026-42862","published":"2026-06-08T15:25:59.588Z","updated":"2026-06-08T15:51:47.010Z","title":"Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-42861","published":"2026-06-08T15:25:47.669Z","updated":"2026-06-09T15:28:06.366Z","title":"Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2026-46444","published":"2026-06-08T15:25:24.883Z","updated":"2026-06-08T15:54:18.205Z","title":"Flowise: Vector Store No Permission Checks","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00328,"kevAdded":null},{"id":"CVE-2026-43995","published":"2026-05-11T17:49:42.189Z","updated":"2026-05-11T18:21:09.537Z","title":"Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)","severity":"MEDIUM","score":5.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2026-8028","published":"2026-05-06T14:15:10.891Z","updated":"2026-05-06T14:35:31.158Z","title":"FlowiseAI Flowise Endpoint account.service.ts verify information disclosure","severity":"MEDIUM","score":6.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2026-8027","published":"2026-05-06T13:45:10.213Z","updated":"2026-05-06T15:26:30.808Z","title":"FlowiseAI Flowise User Controller authorization","severity":"MEDIUM","score":5.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2026-8026","published":"2026-05-06T12:30:11.747Z","updated":"2026-05-06T13:03:55.441Z","title":"FlowiseAI Flowise API Response account.service.ts login information disclosure","severity":"MEDIUM","score":6.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2026-41274","published":"2026-04-23T21:12:51.627Z","updated":"2026-04-24T18:19:51.514Z","title":"Flowise: Cypher Injection in GraphCypherQAChain","severity":"CRITICAL","score":9.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00505,"kevAdded":null},{"id":"CVE-2026-41264","published":"2026-04-23T20:00:19.166Z","updated":"2026-04-24T13:39:10.217Z","title":"Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.01789,"kevAdded":null},{"id":"CVE-2026-41265","published":"2026-04-23T19:58:51.767Z","updated":"2026-04-23T20:17:01.218Z","title":"Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00568,"kevAdded":null},{"id":"CVE-2026-41279","published":"2026-04-23T19:53:15.237Z","updated":"2026-04-23T20:18:05.355Z","title":"Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials","severity":"HIGH","score":8.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2026-41278","published":"2026-04-23T19:52:20.973Z","updated":"2026-04-24T13:39:52.900Z","title":"Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2026-41276","published":"2026-04-23T19:49:26.442Z","updated":"2026-04-24T18:20:07.284Z","title":"Flowise: AccountService resetPassword Authentication Bypass Vulnerability","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0687,"kevAdded":null},{"id":"CVE-2026-41277","published":"2026-04-23T19:48:57.967Z","updated":"2026-04-25T01:31:29.281Z","title":"Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)","severity":"HIGH","score":7.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.03109,"kevAdded":null},{"id":"CVE-2026-41275","published":"2026-04-23T19:33:44.114Z","updated":"2026-04-25T01:29:51.919Z","title":"Flowise: Password Reset Link Sent Over Unsecured HTTP","severity":"HIGH","score":7.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-41273","published":"2026-04-23T19:29:16.526Z","updated":"2026-04-24T18:20:20.316Z","title":"Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2026-41271","published":"2026-04-23T19:17:40.345Z","updated":"2026-04-23T19:45:47.548Z","title":"Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00233,"kevAdded":null},{"id":"CVE-2026-41272","published":"2026-04-23T19:16:08.113Z","updated":"2026-04-23T20:18:56.831Z","title":"Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-41270","published":"2026-04-23T19:15:14.984Z","updated":"2026-04-25T01:28:07.450Z","title":"Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-41269","published":"2026-04-23T19:14:26.918Z","updated":"2026-04-24T18:20:27.952Z","title":"Flowise: File Upload Validation Bypass in createAttachment","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00472,"kevAdded":null},{"id":"CVE-2026-41268","published":"2026-04-23T19:13:36.220Z","updated":"2026-04-23T20:19:47.223Z","title":"Flowise: Flowise Parameter Override Bypass Remote Command Execution","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.1744,"kevAdded":null},{"id":"CVE-2026-41267","published":"2026-04-23T19:12:26.765Z","updated":"2026-04-23T19:44:53.201Z","title":"Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association","severity":"HIGH","score":8.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00334,"kevAdded":null},{"id":"CVE-2026-41266","published":"2026-04-23T19:11:32.549Z","updated":"2026-04-25T01:27:15.859Z","title":"Flowise: Sensitive Data Leak in public-chatbotConfig","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.04059,"kevAdded":null},{"id":"CVE-2026-41137","published":"2026-04-23T19:10:37.727Z","updated":"2026-04-23T20:20:30.780Z","title":"Flowise: Code Injection in CSVAgent leads to Authenticated RCE","severity":"CRITICAL","score":9.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0145,"kevAdded":null},{"id":"CVE-2026-41138","published":"2026-04-23T19:05:22.327Z","updated":"2026-04-24T18:20:34.172Z","title":"Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.","severity":"HIGH","score":8.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00603,"kevAdded":null},{"id":"CVE-2026-40933","published":"2026-04-21T21:00:35.747Z","updated":"2026-04-22T13:20:11.714Z","title":"Flowise: Authenticated RCE Via MCP Adapters","severity":"CRITICAL","score":10,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.11964,"kevAdded":null},{"id":"CVE-2026-31829","published":"2026-03-10T21:43:58.549Z","updated":"2026-03-11T15:19:28.567Z","title":"Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access","severity":"HIGH","score":7.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.02691,"kevAdded":null},{"id":"CVE-2026-30824","published":"2026-03-07T05:11:15.363Z","updated":"2026-03-09T20:44:24.459Z","title":"Flowise: Missing Authentication on NVIDIA NIM Endpoints","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.3733,"kevAdded":null},{"id":"CVE-2026-30823","published":"2026-03-07T05:10:08.035Z","updated":"2026-03-09T20:44:24.602Z","title":"Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration","severity":"HIGH","score":8.8,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2026-30822","published":"2026-03-07T05:08:55.583Z","updated":"2026-03-09T20:44:24.747Z","title":"Flowise: Mass Assignment in `/api/v1/leads` Endpoint","severity":"HIGH","score":7.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.14974,"kevAdded":null},{"id":"CVE-2026-30821","published":"2026-03-07T05:07:50.067Z","updated":"2026-03-09T20:44:24.875Z","title":"Flowise: Arbitrary File Upload via MIME Spoofing","severity":"HIGH","score":8.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.16712,"kevAdded":null},{"id":"CVE-2026-30820","published":"2026-03-07T05:07:44.381Z","updated":"2026-03-09T20:44:25.008Z","title":"Flowise Authorization Bypass via Spoofed x-request-from Header","severity":"HIGH","score":8.7,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2025-34267","published":"2025-10-14T19:31:50.914Z","updated":"2026-10-08T15:21:19.785Z","title":"Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages","severity":"HIGH","score":8.4,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.06885,"kevAdded":null},{"id":"CVE-2025-61913","published":"2025-10-08T22:43:24.076Z","updated":"2025-10-14T14:18:13.859Z","title":"Flowise is vulnerable to arbitrary file read, arbitrary file write","severity":"CRITICAL","score":10,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.13873,"kevAdded":null},{"id":"CVE-2025-61687","published":"2025-10-06T15:54:56.166Z","updated":"2025-10-06T16:04:25.632Z","title":"FlowiseAI/Flosise has File Upload vulnerability","severity":"HIGH","score":8.3,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.11758,"kevAdded":null},{"id":"CVE-2025-50538","published":"2025-10-06T00:00:00.000Z","updated":"2025-10-06T13:53:37.852Z","title":"Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log.","severity":"HIGH","score":8.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.14712,"kevAdded":null},{"id":"CVE-2025-29192","published":"2025-10-06T00:00:00.000Z","updated":"2025-10-06T13:54:31.753Z","title":"Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log.","severity":"HIGH","score":8.2,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2025-59528","published":"2025-09-22T19:54:58.196Z","updated":"2025-09-22T20:24:09.883Z","title":"Flowise has Remote Code Execution vulnerability","severity":"CRITICAL","score":10,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.86975,"kevAdded":null},{"id":"CVE-2025-59527","published":"2025-09-22T19:48:42.436Z","updated":"2025-09-22T20:25:56.571Z","title":"FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability","severity":"HIGH","score":7.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.05455,"kevAdded":null},{"id":"CVE-2025-59434","published":"2025-09-22T19:39:03.774Z","updated":"2025-09-22T19:47:56.540Z","title":"Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function","severity":"CRITICAL","score":9.6,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.04029,"kevAdded":null},{"id":"CVE-2025-58434","published":"2025-09-12T17:37:08.190Z","updated":"2025-09-15T15:31:08.595Z","title":"Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover","severity":"CRITICAL","score":9.8,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.82585,"kevAdded":null},{"id":"CVE-2024-9148","published":"2024-09-24T13:13:13.565Z","updated":"2024-09-24T13:47:35.323Z","title":"Flowise Stored Cross-Site Scripting","severity":"CRITICAL","score":9.6,"vendor":"FlowiseAI","product":"FlowiseChatEmbed","kev":false,"epss":0.00559,"kevAdded":null},{"id":"CVE-2024-8181","published":"2024-08-27T13:10:40.880Z","updated":"2024-09-06T14:27:44.870Z","title":"Flowise Authentication Bypass","severity":"CRITICAL","score":9.8,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.4505,"kevAdded":null},{"id":"CVE-2024-8182","published":"2024-08-27T13:09:02.433Z","updated":"2024-08-27T13:53:23.463Z","title":"Flowise Denial of Service","severity":"HIGH","score":7.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.13893,"kevAdded":null},{"id":"CVE-2024-37146","published":"2024-07-01T18:25:02.670Z","updated":"2024-08-02T03:50:54.583Z","title":"GHSL-2023-248: Flowise xss in /api/v1/credentials/id","severity":"MEDIUM","score":6.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2024-37145","published":"2024-07-01T18:19:02.779Z","updated":"2024-08-02T03:50:54.745Z","title":"GHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/id","severity":"MEDIUM","score":6.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00459,"kevAdded":null},{"id":"CVE-2024-36423","published":"2024-07-01T18:17:18.155Z","updated":"2024-08-02T03:37:04.950Z","title":"GHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id","severity":"MEDIUM","score":6.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2024-36422","published":"2024-07-01T16:02:31.600Z","updated":"2024-08-02T03:37:05.170Z","title":"GHSL-2023-245: Flowise xss in api/v1/chatflows/id","severity":"MEDIUM","score":6.1,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2024-36421","published":"2024-07-01T15:58:02.796Z","updated":"2024-08-02T03:37:05.196Z","title":"GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts","severity":"HIGH","score":7.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.08495,"kevAdded":null},{"id":"CVE-2024-36420","published":"2024-07-01T15:53:14.900Z","updated":"2024-08-02T03:37:05.346Z","title":"GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file","severity":"HIGH","score":7.5,"vendor":"FlowiseAI","product":"Flowise","kev":false,"epss":0.01776,"kevAdded":null}]}