| CVE-2026-31829 | ÉLEVÉE8.8 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.0.13, Flowise exposes an HTTP Node in AgentFlow and Chatflow that performs server-side HTTP requests using user-controlled URLs. By default, there are no restrictions on target hosts, including private/internal IP ranges | 10/03/2026 |
| CVE-2026-30824 | CRITIQUE9.8 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. This i | 07/03/2026 |
| CVE-2026-30823 | ÉLEVÉE8.8 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13. | 07/03/2026 |
| CVE-2026-30822 | ÉLEVÉE7.7 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal database fields when creating leads. This issue has been patched in version 3.0.13. | 07/03/2026 |
| CVE-2026-30821 | CRITIQUE9.8 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the /api/v1/attachments/:chatflowId/:chatId endpoint is listed in WHITELIST_URLS, allowing unauthenticated access to the file upload API. While the server validates uploads based on the MIME types defined i | 07/03/2026 |
| CVE-2026-30820 | ÉLEVÉE8.8 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, Flowise trusts any HTTP client that sets the header x-request-from: internal, allowing an authenticated tenant session to bypass all /api/v1/** authorization checks. With only a browser cookie, a low-privil | 07/03/2026 |
| CVE-2025-57164 | MOYENNE6.5 | Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field. | 17/10/2025 |
| CVE-2025-34267 | CRITIQUE9.9 | Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or | 14/10/2025 |
| CVE-2025-61913 | CRITIQUE9.9 | Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any path in the file system | 08/10/2025 |
| CVE-2025-61687 | ÉLEVÉE8.8 | Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, pote | 06/10/2025 |
| CVE-2025-50538 | MOYENNE6.1 | Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log. | 06/10/2025 |
| CVE-2025-29192 | MOYENNE6.1 | Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log. | 06/10/2025 |
| CVE-2025-59528 | CRITIQUE10.0 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string t | 22/09/2025 |
| CVE-2025-59527 | ÉLEVÉE7.5 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to acces | 22/09/2025 |
| CVE-2025-58434 | CRITIQUE9.8 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication or verification. This enables any attacker to generate a rese | 12/09/2025 |
| CVE-2025-8943 | CRITIQUE9.8 | The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation | 14/08/2025 |
| CVE-2025-29189 | ÉLEVÉE7.6 | Flowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores. | 09/04/2025 |
| CVE-2025-26319 | CRITIQUE9.8 | FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments. | 04/03/2025 |
| CVE-2024-9148 | MOYENNE6.1 | Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0. | 25/09/2024 |
| CVE-2024-8182 | ÉLEVÉE7.5 | An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the “/api/v1/get-upload-file” api endpoint. | 27/08/2024 |