CVE-2026-90535

Mô tả

Tham khảo

• FlowiseAI/Flowise security advisory · Exploit
• vulncheck.com/advisories/flowise-before-3.1.4-denial-of-service-via-text-to-speech-abort · Third Party Advisory

Lỗ hổng khác của flowise

• CVE-2026-90580TRUNG BÌNH 6.3A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/s…
• CVE-2026-90534TRUNG BÌNH 6.5Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name…
• CVE-2026-90533TRUNG BÌNH 6.5Flowise before 3.1.4 contains a broken access control vulnerability in GET /api/v1/organizationuser that allows any authenticated organizati…
• CVE-2026-52098NGHIÊM TRỌNG 9.8An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
• CVE-2026-73604TRUNG BÌNH 6.5Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decr…