Flowise vulnerable to arbitrary file exposure
Flowise
The ReadFileTool in Flowise lacks path restrictions, allowing authenticated attackers to read arbitrary files from the file system. This flaw could potentially lead to remote code execution.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- fix status
- Fix status unknown
- first report
- 10 Oct 2025
- last update
- 10 Oct 2025
Timeline · 1
Sources · 1
Advisories and databases
- 2025-10-10GHSA-j44m-5v8f-gc9c: Flowise is vulnerable to arbitrary file exposure through its ReadFileToolGitHub Advisory Database · github.com/advisories/GHSA-j44m-5v8f-gc9c
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 10 Oct 2025 · first reported 10 Oct 2025
- origin
- GitHub Advisory DatabaseVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.95 · created 2026-10-18 07:00Z · updated 2026-10-18 10:14Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Flowise vulnerable to arbitrary file exposure https://gcdradar.vercel.app/incidents/ghsa-j44m-5v8f-gc9c-flowise-vulnerable-to-arbitrary-file-exp · AIR-2025-0354 · closed 2025-10-10 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2025-10-10 - AI role: Attack on AI - Products: Flowise ## Summary The ReadFileTool in Flowise lacks path restrictions, allowing authenticated attackers to read arbitrary files from the file system. This flaw could potentially lead to remote code execution. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-10-10: GHSA-j44m-5v8f-gc9c: Flowise is vulnerable to arbitrary file exposure through its ReadFileTool (https://github.com/advisories/GHSA-j44m-5v8f-gc9c) ## Sources - 2025-10-10 GitHub Advisory Database: GHSA-j44m-5v8f-gc9c: Flowise is vulnerable to arbitrary file exposure through its ReadFileTool https://github.com/advisories/GHSA-j44m-5v8f-gc9c Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed8.4Flowise CVE-2025-34267: Flowise Sandbox Escape and RCE Vulnerability
Patch now · Disclosed · since 14 Oct 2025 · CVE-2025-34267
AI - closed9.9Flowise CVE-2025-61913: Flowise File Path Traversal Vulnerability
Patch now · Disclosed · since 8 Oct 2025 · updated 9 Oct 2025 · CVE-2025-61913
AI - closed9.8Flowise CVE-2025-55346: Flowise vulnerable to RCE via Dynamic function constructor injection
Patch now · Disclosed · since 6 Oct 2025 · CVE-2025-55346
AI - closed8.3Flowise CVE-2025-61687: Flowise file upload vulnerability leads to RCE
Patch now · Disclosed · since 6 Oct 2025 · updated 8 Oct 2025 · CVE-2025-61687
AI - closedFlowise Flowise vulnerable to XSS
Patch now · Disclosed · since 3 Oct 2025
AI - closed9.3Flowise CVE-2025-50538: Flowise iframe cross-site scripting vulnerability
Patch now · Disclosed · since 6 Oct 2025 · updated 6 Oct 2025 · CVE-2025-50538
AI