An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint

Published Sep 10, 2026 · Updated Sep 10, 2026 · Assigned by mitre