Skip to content
OpenAdvisories
High WID-SEC-2026-1554 17 CVEs

Flowise: Mehrere Schwachstellen ermöglichen Codeausführung

Published May 14, 2026 · Updated Jun 30, 2026 · Revision 6 · de-DE

Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um Code auszuführen, Objekte anderer Benutzer zu übernehmen, Informationen offenzulegen und weitere, nicht näher genannte Auswirkungen zu erzielen.

Product

Flowise ist eine Benutzeroberfläche zur Erstellung von LLMs (Large Language Model).

Vulnerabilities 17

  • Critical 9.9
    CVE-2026-56274 Public exploit

    Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

    Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to incomplete command-flag validation and a regex bypass in local file access restrictions. An attacker with a Flowise account of any role, or API…

    Flowise Flowise Flowise Components flowise npm
  • Critical 9.4
    CVE-2026-46442 Scanner template EPSS 33%

    Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to th…

    FlowiseAI Flowise flowise npm
  • High 8.7
    CVE-2026-46444

    Flowise: Vector Store No Permission Checks

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRUD endpoints for OpenAI Assistants Vector Store have no authentication middleware and the route path /api/v1/openai-assistants-vector-store …

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-46475

    Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, assistant create and update mass-assignment allows cross-workspace assistant takeover. This issue has been patched in version 3.1.2.

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-46476

    Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-workspace template takeover. This issue has been patched in version 3.1.2.

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-46477

    Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset create and update mass-assignment allows cross-workspace dataset takeover. This issue has been patched in version 3.1.2.

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-46478

    Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, DatasetRow create and update mass-assignment allows cross-workspace row takeover. This issue has been patched in version 3.1.2.

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-46479

    Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluation create and update mass-assignment allows cross-workspace evaluation takeover. This issue has been patched in version 3.1.2.

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-46480

    Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluator create and update mass-assignment allows cross-workspace evaluator takeover. This issue has been patched in version 3.1.2.

    FlowiseAI Flowise flowise npm
  • High 7.7
    CVE-2026-56268

    Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint

    Flowise before 3.1.2 contains an information disclosure vulnerability in the /api/v1/chatflows/apikey/:apikey endpoint. When the keyonly query parameter is omitted (the default), the endpoint returns not only the chatflows bound to the supplied API key but al…

    Flowise Flowise flowise npm
  • High 7.6
    CVE-2026-42861

    Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-cont…

    FlowiseAI Flowise flowise npm
  • High 7.6
    CVE-2026-42862

    Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the tool update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-controll…

    FlowiseAI Flowise flowise npm
  • High 7.6
    CVE-2026-42863

    Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the chatflow update endpoint of FlowiseAI. The endpoint allows clients to modify server-controlled prope…

    FlowiseAI Flowise flowise npm
  • High 7.6
    CVE-2026-46441

    Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the assistant update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-con…

    FlowiseAI Flowise flowise npm
  • High 7.5
    CVE-2026-46440

    Flowise: Basic Auth Credentials Exposed via API

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, the checkBasicAuth endpoint validates credentials in plaintext without rate limiting and with direct comparison. This issue has been patched in ve…

    FlowiseAI Flowise flowise npm
  • High 7.0
    CVE-2026-46443

    Flowise: Credential Data Leak

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when credentials are fetched with a credentialName filter parameter, the encryptedData field is not stripped from the response. The code properly …

    FlowiseAI Flowise flowise npm
  • Medium 6.9
    CVE-2026-56277

    Flowise - Hardcoded CORS Wildcard in TTS Endpoint

    Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to-speech (TTS) generation endpoint (packages/server/src/controllers/text-to-speech/index.ts), independent of the server's configured CORS policy. This bypasses the …

    Flowise Flowise flowise npm

Revision history

  1. #6

    Referenz(en) aufgenommen: CVE-2026-56277, EUVD-2026-40432

  2. #5

    Referenz(en) aufgenommen: CVE-2026-56274, EUVD-2026-38434

  3. #4

    Referenz(en) aufgenommen: CVE-2026-56268, EUVD-2026-38367

  4. #3

    Referenz(en) aufgenommen: CVE-2026-46440, EUVD-2026-35107, EUVD-2026-35102, EUVD-2026-35113, EUVD-2026-35106, EUVD-2026-35117, EUVD-2026-35104, EUVD-2026-35116, EUVD-2026-35115, EUVD-2026-35114, EUVD-2026-35111, EUVD-2026-35110, EUVD-2026-35103, EUVD-2026-35109, EUVD-2026-35112

  5. #2

    CVE ergänzt

  6. #1

    Initiale Fassung

References