Skip to content
OpenAdvisories
High WID-SEC-2026-1145 25 CVEs

Flowise: Mehrere Schwachstellen

Published Apr 15, 2026 · Updated Jul 12, 2026 · Revision 9 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.

Product

Flowise ist eine Benutzeroberfläche zur Erstellung von LLMs (Large Language Model).

Vulnerabilities 25

  • Critical 9.8
    CVE-2026-56271

    Flowise - Weak Default JWT Secrets in Authentication Middleware

    Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in the enterprise passport authentication middleware (packages/se…

    Flowise Flowise flowise npm
  • Critical 9.4
    CVE-2026-41137

    Flowise: Code Injection in CSVAgent leads to Authenticated RCE

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, The CSVAgent allows providing a custom Pandas CSV read code. Due to lack of sanitization, an attacker can provide a command injection payload that will ge…

    FlowiseAI Flowise flowise-components flowise npm
  • Critical 9.3
    CVE-2026-41274

    Flowise: Cypher Injection in GraphCypherQAChain

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can in…

    FlowiseAI Flowise flowise-components flowise npm
  • Critical 9.2
    CVE-2026-41264 Public exploit

    Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the CSV_Agents class. The issue results from the lack of proper sandboxing when evaluating an LLM genera…

    FlowiseAI Flowise flowise flowise-components npm
  • Critical 9.2
    CVE-2026-41265

    Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the Airtable_Agents class. The issue results from the lack of proper sandboxing when evaluating an LLM g…

    FlowiseAI Flowise flowise flowise-components npm
  • Critical 9.1
    CVE-2026-56278

    Flowise - Session Hijacking via Weak Default Express Session Secret

    Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-session middleware when the EXPRESS_SESSION_SECRET environment variable is not set (packages/server/src/enterprise/middleware/passport…

    Flowise Flowise flowise npm
  • High 8.7
    CVE-2026-41278

    Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GET /api/v1/public-chatflows/:id endpoint returns the full chatflow object without sanitization for public chatflows. Docker validation revealed this …

    FlowiseAI Flowise flowise npm
  • High 8.3
    CVE-2026-41138

    Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, there is a remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas. The user’s input is directly ap…

    FlowiseAI Flowise flowise flowise-components npm
  • High 8.2
    CVE-2026-41279

    Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint (POST /api/v1/text-to-speech/generate) is whitelisted (no auth) and accepts a credentialId directly in the request …

    FlowiseAI Flowise flowise npm
  • High 8.1
    CVE-2026-41267

    Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, an improper mass assignment (JSON injection) vulnerability in the account registration endpoint of Flowise Cloud allows unauthenticated attackers to injec…

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-41266

    Flowise: Sensitive Data Leak in public-chatbotConfig

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, /api/v1/public-chatbotConfig/:id ep exposes sensitive data including API keys, HTTP authorization headers and internal configuration without any authentic…

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-41268 EPSS 17%

    Flowise: Flowise Parameter Override Bypass Remote Command Execution

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise is vulnerable to a critical unauthenticated remote command execution (RCE) vulnerability. It can be exploited via a parameter override bypass usin…

    FlowiseAI Flowise flowise flowise-components npm
  • High 7.7
    CVE-2026-41273

    Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise contains an authentication bypass vulnerability that allows an unauthenticated attacker to obtain OAuth 2.0 access tokens associated with a public…

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-41276

    Flowise: AccountService resetPassword Authentication Bypass Vulnerability

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerability allows remote attackers to bypass authentication on affected installations of FlowiseAI Flowise. Authentication is not required to expl…

    FlowiseAI Flowise flowise npm
  • High 7.6
    CVE-2026-41277

    Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the DocumentStore creation endpoint allows authenticated users to control the primary key (id) and internal state field…

    FlowiseAI Flowise flowise npm
  • High 7.5
    CVE-2026-41275

    Flowise: Password Reset Link Sent Over Unsecured HTTP

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password reset functionality on cloud.flowiseai.com sends a reset password link over the unsecured HTTP protocol instead of HTTPS. This behavior intro…

    FlowiseAI Flowise flowise npm
  • High 7.5
    CVE-2026-56270 Scanner template

    Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint

    Flowise before 3.1.0 (versions 3.0.13 and earlier) contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint that allows unauthenticated users to retrieve an organization's complete SSO configuration, including OAuth client secrets i…

    Flowise Flowise flowise npm
  • High 7.1
    CVE-2026-41269

    Flowise: File Upload Validation Bypass in createAttachment

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the Chatflow configuration file upload settings can be modified to allow the application/javascript MIME type. This lets an attacker upload .js files even…

    FlowiseAI Flowise flowise npm
  • High 7.1
    CVE-2026-41270

    Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) protection bypass vulnerability exists in the Custom Function feature. While the application implements SSRF protecti…

    FlowiseAI Flowise flowise-components flowise npm
  • High 7.1
    CVE-2026-41271

    Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the …

    FlowiseAI Flowise flowise-components flowise npm
  • High 7.1
    CVE-2026-41272

    Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the core security wrappers (secureAxiosRequest and secureFetch) intended to prevent Server-Side Request Forgery (SSRF) contain multiple logic flaws. These…

    FlowiseAI Flowise flowise-components flowise npm
  • Medium 6.5
    CVE-2026-56273

    Flowise - Path Traversal in Vector Store basePath Parameter

    Flowise before 3.1.0 contains a path traversal vulnerability in Faiss and SimpleStore vector store implementations that accept unsanitized basePath parameters from authenticated users. Attackers with valid API tokens can write vector store data to arbitrary f…

    Flowise Flowise flowise flowise-components npm
  • Medium 6.0
    CVE-2026-56275

    Flowise - Server-Side Request Forgery via Execute Flow Base URL

    Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base URL field. Attackers can initiate HTTP requests to internal…

    Flowise Flowise flowise flowise-components npm
  • Medium 5.3
    CVE-2026-43995

    Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients (node-fetch, axios) instead of using the secured wrapper. These tools include (1…

    FlowiseAI Flowise flowise flowise-components npm
  • Medium 4.6
    CVE-2026-56269

    Flowise - Weak Default Token Hash Secret in JWT Token Encryption

    Flowise before 3.1.0 (npm package flowise, versions 3.0.13 and earlier) uses a weak hardcoded default value 'Secre$t' for the TOKEN_HASH_SECRET environment variable in packages/server/src/enterprise/utils/tempTokenUtils.ts when the variable is not configured.…

    Flowise Flowise flowise npm

Revision history

  1. #9

    Referenz(en) aufgenommen: CVE-2026-56271, EUVD-2026-43228

  2. #8

    Referenz(en) aufgenommen: CVE-2026-56273, EUVD-2026-42251

  3. #7

    Referenz(en) aufgenommen: CVE-2026-56278, EUVD-2026-40433

  4. #6

    Referenz(en) aufgenommen: ZDI-26-365, ZDI-CAN-29410, ZDI-26-364, ZDI-CAN-29411, CVE-2026-56269, EUVD-2026-38746, CVE-2026-56270, EUVD-2026-38747

  5. #5

    Referenz(en) aufgenommen: CVE-2026-56275, EUVD-2026-38435

  6. #4

    CVE ergänzt

  7. #3

    CVE's ergänzt

  8. #2

    CVE ergänzt

  9. #1

    Initiale Fassung

References