Skip to content
OpenAdvisories

Vendor

Flowise

25 known vulnerabilities.

Products

Flowise 25 Flowise Components 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56271

    Flowise - Weak Default JWT Secrets in Authentication Middleware

    Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in the enterprise passport authentication middleware (packages/se…

    Flowise Flowise flowise npm
  • Critical 9.1
    CVE-2026-56278

    Flowise - Session Hijacking via Weak Default Express Session Secret

    Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-session middleware when the EXPRESS_SESSION_SECRET environment variable is not set (packages/server/src/enterprise/middleware/passport…

    Flowise Flowise flowise npm
  • Critical 10.0
    CVE-2025-71338 Public exploit

    Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API

    Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write files outside the storage directory. Attackers can use parent-directory sequences to escape the storage directory and over…

    Flowise Flowise flowise npm
  • Critical 9.8
    CVE-2025-71336

    Flowise - Unsandboxed Remote Code Execution via Custom MCP

    Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnerability in the Custom MCP feature, which is designed to execute OS commands such as launching local MCP servers. Because Flowise's authentic…

    Flowise Flowise flowise npm
  • Critical 9.8
    CVE-2025-71334 Scanner template

    Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

    Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling operations. By supplying a path-traversal value (e.g., '../../../../../tmp') as the …

    Flowise Flowise flowise npm
  • Critical 9.3
    CVE-2025-71333

    Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint

    Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local. Attackers can exploit path traversal in the chatId and chatflowId parameters to upload malicious files …

    Flowise Flowise flowise npm
  • Critical 9.1
    CVE-2025-71327

    Flowise - Authentication Bypass via Unprotected Registration Endpoint

    Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authentic…

    Flowise Flowise flowise npm
  • Critical 9.9
    CVE-2026-56274 Public exploit

    Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

    Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to incomplete command-flag validation and a regex bypass in local file access restrictions. An attacker with a Flowise account of any role, or API…

    Flowise Flowise Flowise Components flowise npm
  • Critical 9.8
    CVE-2024-58351

    Flowise - Remote Code Execution via overrideConfig Parameter

    Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported in both the frontend web integration and the backend Prediction API. Because this feature is enabled by default with no allow…

    Flowise Flowise flowise npm