CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,477 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,477
Show in the list
Critical, last 7 days
360
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product flowiseai:flowise. Show all products

130 CVEs, showing 51 to 100PreviousPage 2 of 3Next
CVESeverityTitlePublished
CVE-2026-46480High 8.8Flowise is a drag & drop user interface to build a customized large language model flow.Jun 8, 2026
CVE-2025-71331Medium 6.1Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions.Jun 20, 2026
CVE-2026-56268High 7.7Flowise before 3.1.2 contains an information disclosure vulnerability in the /api/v1/chatflows/apikey/:apikey endpoint.Jun 22, 2026
CVE-2025-71337High 8.3Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change vulnerability.Jun 23, 2026
CVE-2026-56274Critical 9.9Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to incomplete command-flag validation and a regex bypass in local file access restrict…Jun 23, 2026
CVE-2026-56275High 7.1Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base…Jun 23, 2026
CVE-2025-71332High 8.8Flowise through 2.2.7 contains a SQL injection vulnerability in the importChatflows API.Jun 24, 2026
CVE-2026-56269Medium 4.6Flowise before 3.1.0 (npm package flowise, versions 3.0.13 and earlier) uses a weak hardcoded default value 'Secre$t' for the TOKEN_HASH_SECRET environment variable in packages/server/src/enterprise/…Jun 24, 2026
CVE-2026-56270High 7.5Flowise before 3.1.0 (versions 3.0.13 and earlier) contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint that allows unauthenticated users to retrieve an organization's…Jun 24, 2026
CVE-2026-56272Medium 4.1Flowise before 3.0.13 uses bcrypt with default salt rounds of 5, providing only 32 iterations instead of the OWASP-recommended minimum of 10 rounds.Jun 24, 2026
CVE-2025-71324High 7.5Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints.Jun 25, 2026
CVE-2025-71327Critical 9.1Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts.Jun 25, 2026
CVE-2025-71328High 8.8Flowise before 3.0.10 contains an unverified password change vulnerability.Jun 25, 2026
CVE-2025-71333Critical 9.8Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local.Jun 25, 2026
CVE-2025-71334Critical 9.8Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in…Jun 25, 2026
CVE-2025-71335High 8.1Flowise before 3.0.10 (affected versions 3.0.7 and earlier) fails to invalidate existing sessions and session tokens after a user changes their password.Jun 25, 2026
CVE-2025-71336Critical 9.8Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnerability in the Custom MCP feature, which is designed to execute OS commands such…Jun 25, 2026
CVE-2025-71338Critical 9.8Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write files outside the storage directory.Jun 25, 2026
CVE-2026-58057Medium 5.0Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where environment names are case-insensitive, supplying 'nod…Jun 28, 2026
CVE-2026-56277Medium 6.5Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to-speech (TTS) generation endpoint (packages/server/src/controllers/text-to-speech/index.ts), independen…Jun 30, 2026
CVE-2026-56278Critical 9.1Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-session middleware when the EXPRESS_SESSION_SECRET environment variable is…Jun 30, 2026
CVE-2026-56271Critical 9.8Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in th…Jul 12, 2026
CVE-2026-69250High 8.5Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69251Critical 9.0Flowise RCE via TypeORM DataSource
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69252High 7.2Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69253Critical 9.0Flowise Sandbox Escape to RCE
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69254Critical 9.4Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69255Critical 9.2Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69256Critical 9.4Flowise: Remote Code Execution Vulnerability in CSVAgent
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69257High 7.6Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69258High 8.8Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69259Critical 9.4Flowise RCE via SQLite Record Manager Node
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69262High 7.1Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69263High 8.7Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69264Critical 9.4Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70470Critical 9.5Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70471High 7.1Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70472High 7.1Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70473High 8.3Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70474High 7.6Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70475High 7.1Flowise: Missing Authorization on Execution Update Endpoint
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70476High 8.3Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70477Critical 9.5Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70478Critical 9.2Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-67621High 7.6Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints
Assigned by VulnCheck
Aug 6, 2026
CVE-2026-67622Critical 9.9Flowise 3.1.4 IDOR in OpenAI Assistants Integration
Assigned by VulnCheck
Aug 6, 2026
CVE-2026-70636High 7.5Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint
Assigned by VulnCheck
Aug 6, 2026
CVE-2026-67620High 7.7Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List
Assigned by VulnCheck
Aug 8, 2026
CVE-2026-71962High 7.5Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download
Assigned by VulnCheck
Aug 10, 2026
CVE-2026-73483Critical 9.4Flowise before 3.1.3 Sandbox Escape via Puppeteer
Assigned by VulnCheck
Aug 13, 2026
PreviousPage 2 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.