CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product flowiseai:flowise. Show all products

130 CVEs, showing 1 to 50Page 1 of 3Next
CVESeverityTitlePublished
CVE-2026-100610High 7.5Flowise through 3.1.4 Missing Authorization via upsert-history
Assigned by VulnCheck
Sep 26, 2026
CVE-2026-100609Medium 6.8Flowise through 3.1.4 Insecure Direct Object Reference via Credential
Assigned by VulnCheck
Sep 26, 2026
CVE-2026-100608High 8.3Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard
Assigned by VulnCheck
Sep 26, 2026
CVE-2026-100607High 7.7Flowise through 3.1.4 Authentication Bypass via Email-Only SSO
Assigned by VulnCheck
Sep 26, 2026
CVE-2026-100606High 7.7Flowise through 3.1.4 Authentication Bypass via SSO Email Match
Assigned by VulnCheck
Sep 26, 2026
CVE-2026-100605High 7.1Flowise through 3.1.4 Missing Authorization via Chat Message Routes
Assigned by VulnCheck
Sep 26, 2026
CVE-2026-91938High 7.1Flowise before 3.1.4 Server-Side Request Forgery via document loaders
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91937High 7.5Flowise before 3.1.4 NoSQL Injection via sessionId
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91936Medium 6.8Flowise before 3.1.4 Script Injection via Docker Workflows
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91935High 8.3Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91934High 8.8Flowise before 3.1.4 Remote Code Execution via SQL Database Chain
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91933High 7.1Flowise before 3.1.4 Authorization Bypass via openai-realtime
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91932High 8.5Flowise before 3.1.4 Remote Code Execution via cwd Parameter
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91931High 8.5Flowise before 3.1.4 Remote Code Execution via Custom MCP npx
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91930High 7.5Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-91929High 7.1Flowise before 3.1.4 Cross-Tenant Authorization Bypass
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-90580Medium 6.3FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery
Assigned by VulDB
Sep 13, 2026
CVE-2026-90535Medium 6.3Flowise before 3.1.4 Denial of Service via text-to-speech/abort
Assigned by VulnCheck
Sep 12, 2026
CVE-2026-90534Medium 6.1Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method
Assigned by VulnCheck
Sep 12, 2026
CVE-2026-90533Medium 6.0Flowise before 3.1.4 Broken Access Control via organizationuser
Assigned by VulnCheck
Sep 12, 2026
CVE-2026-52098Critical 9.8An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
Assigned by mitre
Sep 10, 2026
CVE-2026-73604Medium 6.5Flowise before 3.1.3 Credential Exposure via API
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73603Medium 6.3Flowise before 3.1.4 Credential Abuse via Text-to-Speech
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73602Critical 9.0Flowise before 3.1.3 Sandbox Escape to RCE
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73601Critical 9.0Flowise before 3.1.3 Remote Code Execution via Custom MCP
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73488Medium 6.0Flowise before 3.1.3 IDOR via customer-default-source endpoint
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73487Critical 9.0Flowise before 3.1.3 Prompt Injection RCE via CSV Agent
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73486Critical 9.0Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73485Critical 9.0Flowise before 3.1.3 Remote Code Execution via Airtable Agent
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73484High 8.6Flowise before 3.1.3 Sandbox Escape via Pandas Methods
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73483Critical 9.4Flowise before 3.1.3 Sandbox Escape via Puppeteer
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-71962High 7.5Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download
Assigned by VulnCheck
Aug 10, 2026
CVE-2026-67620High 7.7Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List
Assigned by VulnCheck
Aug 8, 2026
CVE-2026-70636High 7.5Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint
Assigned by VulnCheck
Aug 6, 2026
CVE-2026-67622Critical 9.9Flowise 3.1.4 IDOR in OpenAI Assistants Integration
Assigned by VulnCheck
Aug 6, 2026
CVE-2026-67621High 7.6Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints
Assigned by VulnCheck
Aug 6, 2026
CVE-2026-70478Critical 9.2Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70477Critical 9.5Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70476High 8.3Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70475High 7.1Flowise: Missing Authorization on Execution Update Endpoint
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70470Critical 9.8Flowise is a drag & drop user interface to build a customized large language model flow.Aug 4, 2026
CVE-2026-69264Critical 9.8Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide.Aug 4, 2026
CVE-2026-70474High 7.6Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70473High 8.3Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70472High 7.1Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-70471High 7.1Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Assigned by GitHub_M
Aug 4, 2026
CVE-2026-69263Critical 9.8Flowise is a drag & drop user interface to build a customized large language model flow.Aug 4, 2026
CVE-2026-69262High 8.1Flowise is a drag & drop user interface to build a customized large language model flow.Aug 4, 2026
CVE-2026-69259High 8.8Flowise is a drag & drop user interface to build a customized large language model flow.Aug 4, 2026
CVE-2026-69258Critical 9.1Flowise is a drag & drop user interface to build a customized large language model flow.Aug 4, 2026
Page 1 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.