Description
Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling operations. By supplying a path-traversal value (e.g., '../../../../../tmp') as the chatflow id, an unauthenticated attacker can use the /api/v1/chatflows endpoint (via addBase64FilesToStorage) to write arbitrary files, and the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints (via streamStorageFile) to read arbitrary files. Arbitrary file write may lead to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Flowise | Flowise | < 3.0.6 | 3.0.6 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Flowise - Path Traversal http/cves/2025/CVE-2025-71334.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | flowise | >= 2.2.8, < 3.0.6 | 3.0.6 | GHSA-q67q-549q-p849 |
Advisories 1
- WID-SEC-2025-2055 Flowise: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Jun 25, 2026
References
- GitHub Security Advisory (GHSA-q67q-549q-p849) vendor-advisory
- https://github.com/FlowiseAI/Flowise/commit/8bd3de41533de78e4ef6c980e5704a1f9cb7ae6f patch
- https://github.com/FlowiseAI/Flowise/commit/c2b830f279e454e8b758da441016b2234f220ac7 patch
- VulnCheck Advisory: Flowise - Arbitrary File Access via Missing Chat Flow ID Validation third-party-advisory