Flowise
Filed as: FlowiseAI, Flowise Chat Embed, Flowise Cloud, flowise-components, FlowiseAI Flowise
Newest record 2026-11-13 · 153 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 1
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- closed9.2Flowise CVE-2026-69255: Flowise CSV Agent Remote Code Execution via Pyodide Code Injection
Exploited · since 4 Aug 2026 · CVE-2026-69255
AI
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 173
- closed6.3Flowise CVE-2026-127214: Flowise server-side request forgery vulnerability
Disclosed · since 13 Nov 2026 · CVE-2026-127214
AI - closed9.0Flowise CVE-2026-119978: Flowise Sandbox Escape Leads to OS Command Execution
Disclosed · since 30 Oct 2026 · CVE-2026-119978
AI - closed7.5Flowise Flowise Missing RBAC on Chat Endpoints Permits Unauthorized Data Access
Disclosed · since 26 Sep 2026 · CVE-2026-100605
AI - closed9.2Flowise Flowise Authentication Vulnerability Allows Account Takeover via Email Matching
Disclosed · No patch yet · since 26 Sep 2026 · CVE-2026-100607
AI - closed9.2Flowise CVE-2026-100606: Flowise enterprise mode SSO login authentication bypass
Disclosed · since 26 Sep 2026 · CVE-2026-100606
AI - closed7.6Flowise CVE-2026-100609: Flowise credential lookup lacks workspace isolation
Disclosed · since 26 Sep 2026 · CVE-2026-100609
AI - closed8.7Flowise CVE-2026-100608: Flowise lacks proper authorization on BullMQ admin dashboard
Disclosed · since 26 Sep 2026 · CVE-2026-100608
AI - closed7.7Flowise CVE-2026-100610: Flowise missing permission checks on upsert-history endpoints
Disclosed · since 26 Sep 2026 · CVE-2026-100610
AI - closed7.6Flowise Flowise Document Loader SSRF Vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-91938
AI - closed9.0Flowise Flowise Validation Bypass Vulnerability in MCP Server Configuration
Disclosed · since 15 Sep 2026 · CVE-2026-91932
AI - closed8.8Flowise CVE-2026-91934: Flowise Path Validation Flaw in SQL Database Chain Node
Disclosed · since 15 Sep 2026 · CVE-2026-91934
AI - closed8.3Flowise CVE-2026-91936: Flowise Script Injection Vulnerability in Docker Build Workflows
Disclosed · since 15 Sep 2026 · CVE-2026-91936
AI - closed7.6Flowise CVE-2026-91933: Flowise Workspace Authorization Bypass in Realtime Endpoints
Disclosed · since 15 Sep 2026 · CVE-2026-91933
AI - closed8.7Flowise Flowise MongoDBMemory Node Query Injection Exposes Chat History
Disclosed · since 15 Sep 2026 · CVE-2026-91937
AI - closed7.6Flowise Flowise Cross-Tenant Authorization Gaps in Enterprise Endpoints
Disclosed · since 15 Sep 2026 · CVE-2026-91929
AI - closed8.7Flowise Flowise baseURL Parameter Validation Flaw Allows Request Redirection
Disclosed · since 15 Sep 2026 · CVE-2026-91935
AI - closed9.0Flowise CVE-2026-91931: Flowise custom MCP node remote code execution
Disclosed · since 15 Sep 2026 · CVE-2026-91931
AI - closed7.7Flowise CVE-2026-91930: Flowise tenant isolation bypass vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-91930
AI - closed6.3Flowise CVE-2026-90580: Flowise Server-Side Request Forgery Vulnerability
Disclosed · since 13 Sep 2026 · CVE-2026-90580
AI - closed7.5Flowise CVE-2026-90535: Flowise Denial of Service Vulnerability
Disclosed · since 12 Sep 2026 · CVE-2026-90535
AI - closed6.5Flowise CVE-2026-90533: Flowise broken access control vulnerability
Disclosed · since 12 Sep 2026 · CVE-2026-90533
AI - closed6.5Flowise CVE-2026-90534: Flowise credential resolution permission bypass
Disclosed · since 12 Sep 2026 · CVE-2026-90534
AI - closed9.8Flowise CVE-2026-52098: Flowise remote code execution vulnerability
Disclosed · since 10 Sep 2026 · CVE-2026-52098
AI - closed8.6Flowise CVE-2026-73484: Flowise pythonCodeValidator sandbox escape vulnerability
Disclosed · since 13 Aug 2026 · CVE-2026-73484
AI - closed6.3Flowise CVE-2026-73603: Chatflow visibility bypass in Flowise TTS endpoint
Disclosed · since 13 Aug 2026 · CVE-2026-73603
AI - closed9.0Flowise CVE-2026-73486: Code injection in Flowise CSV Agent node
Disclosed · since 13 Aug 2026 · CVE-2026-73486
AI - closed7.1Flowise CVE-2026-73604: Incomplete credential redaction in Flowise API
Disclosed · since 13 Aug 2026 · CVE-2026-73604
AI - closed9.9Flowise CVE-2026-73602: Sandbox escape and code execution in Flowise
Disclosed · since 13 Aug 2026 · CVE-2026-73602
AI - closed9.0Flowise CVE-2026-73601: Remote code execution in Flowise Custom MCP node
Disclosed · since 13 Aug 2026 · CVE-2026-73601
AI - closed9.0Flowise CVE-2026-73485: Code injection vulnerability in Flowise Airtable Agent node
Disclosed · since 13 Aug 2026 · CVE-2026-73485
AI - closed6.5Flowise CVE-2026-73488: Insecure direct object reference in Flowise customer endpoint
Disclosed · since 13 Aug 2026 · CVE-2026-73488
AI - closed9.4Flowise CVE-2026-73483: Flowise NodeVM sandbox escape via puppeteer configuration
Disclosed · since 7 Oct 2026 · updated 7 Oct 2026 · CVE-2026-73483
AI - closed9.0Flowise CVE-2026-73487: Flowise prompt injection bypass leads to RCE and SSRF
Disclosed · since 7 Oct 2026 · updated 7 Oct 2026 · CVE-2026-73487
AI - closed8.7Flowise CVE-2026-71962: Flowise Missing Authorization on Assistant File Download
Disclosed · since 10 Aug 2026 · CVE-2026-71962
AI - closed7.7Flowise CVE-2026-67620: Flowise SSRF Vulnerability in Metadata Guard
Disclosed · since 8 Aug 2026 · CVE-2026-67620
AI - closed7.6Flowise CVE-2026-67621: Flowise missing authorization in document store routes
Disclosed · since 6 Aug 2026 · CVE-2026-67621
AI - closed9.9Flowise CVE-2026-67622: Flowise IDOR vulnerability in OpenAI Assistants integration
Disclosed · since 6 Aug 2026 · CVE-2026-67622
AI - closed8.7Flowise CVE-2026-70636: Flowise auth bypass vulnerability in OAuth2 endpoint
Disclosed · since 6 Aug 2026 · CVE-2026-70636
AI - closedFlowise Flowise Unauthenticated TTS Credential Abuse
Disclosed · since 4 Aug 2026
AI - closed9.4Flowise CVE-2026-69256: Flowise Remote Code Execution Vulnerability in CSVAgent
Disclosed · since 4 Aug 2026 · CVE-2026-69256
AI - closed9.4Flowise CVE-2026-69254: Flowise RCE via NodeVM Sandbox Escape in executeJavaScriptCode
Disclosed · since 4 Aug 2026 · CVE-2026-69254
AI - closed9.4Flowise CVE-2026-69264: Flowise RCE via CSVAgent data URI Python interpolation
Disclosed · since 4 Aug 2026 · CVE-2026-69264
AI - closed7.6Flowise CVE-2026-70474: Flowise Cross-Workspace OAuth2 Credential Metadata Leak
Disclosed · since 4 Aug 2026 · CVE-2026-70474
AI - closed8.5Flowise CVE-2026-69250: Flowise Unauthenticated OAuth2 Refresh Enables SSRF and Secret Exfiltration
Disclosed · since 4 Aug 2026 · CVE-2026-69250
AI - closed9.5Flowise CVE-2026-70470: Flowise Pyodide Validator Unicode Homoglyph Bypass Leads to RCE
Disclosed · since 4 Aug 2026 · CVE-2026-70470
AI - closed9.0Flowise CVE-2026-69251: Flowise RCE via TypeORM DataSource
Disclosed · since 4 Aug 2026 · CVE-2026-69251
AI - closed9.2Flowise CVE-2026-70478: Flowise Unauthenticated OAuth2 Token Refresh Endpoint Allows Token Theft
Disclosed · since 4 Aug 2026 · CVE-2026-70478
AI - closed7.2Flowise CVE-2026-69252: Flowise Missing Authorization on File Routes
Disclosed · since 4 Aug 2026 · CVE-2026-69252
AI - closed9.0Flowise CVE-2026-69253: Flowise Sandbox Escape to Remote Code Execution
Disclosed · since 4 Aug 2026 · CVE-2026-69253
AI - closed8.3Flowise CVE-2026-70473: Flowise Information Disclosure via Upsert History
Disclosed · since 4 Aug 2026 · CVE-2026-70473
AI - closed7.1Flowise CVE-2026-70475: Flowise Missing Authorization on Execution Update
Disclosed · since 4 Aug 2026 · CVE-2026-70475
AI - closed9.4Flowise CVE-2026-69259: Flowise RCE via SQLite Record Manager Node
Disclosed · since 4 Aug 2026 · CVE-2026-69259
AI - closedFlowise Flowise authenticated arbitrary file write in S3 Directory document loader
Disclosed · since 4 Aug 2026
AI - closed7.6Flowise Flowise SSRF protection bypass via IPv4-mapped IPv6 addresses
Disclosed · since 4 Aug 2026 · CVE-2026-69257
AI - closed8.7Flowise Flowise patch bypass allows unauthenticated RCE via npm_config_yes
Disclosed · since 4 Aug 2026 · CVE-2026-69263
AI - closed8.3Flowise Flowise broken access control in Stripe subscription endpoints
Disclosed · since 4 Aug 2026 · CVE-2026-70476
AI - closedFlowise Flowise IDOR vulnerability exposes payment and profile data
Disclosed · since 4 Aug 2026
AI - closed7.1Flowise CVE-2026-69262: Flowise resource validation flaw in deletion API
Disclosed · since 4 Aug 2026 · CVE-2026-69262
AI - closed7.1Flowise CVE-2026-70471: Flowise RBAC bypass leads to workspace variable disclosure
Disclosed · since 4 Aug 2026 · CVE-2026-70471
AI - closedFlowise Flowise incomplete credential redaction exposes secrets
Disclosed · since 4 Aug 2026
AI - closed8.8Flowise CVE-2026-69258: Flowise unauthenticated property injection in prediction API
Disclosed · since 4 Aug 2026 · CVE-2026-69258
AI - closed7.1Flowise CVE-2026-70472: Flowise cross-workspace credential IDOR vulnerability
Disclosed · since 4 Aug 2026 · CVE-2026-70472
AI - closed9.5Flowise Flowise CSV Agent prompt injection leads to remote code execution
Disclosed · since 4 Aug 2026 · CVE-2026-70477
AI - closed9.8Flowise Weak Hardcoded JWT Secrets in Flowise Authentication
Disclosed · since 12 Jul 2026 · CVE-2026-56271
AI - closed6.5Flowise Path Traversal in Flowise Vector Store Implementations
Disclosed · since 8 Jul 2026 · CVE-2026-56273
AI - closed9.3Flowise CVE-2026-56278: Flowise uses a hardcoded default session secret enabling authentication bypass
Disclosed · since 30 Jun 2026 · CVE-2026-56278
AI - closed6.9Flowise CVE-2026-56277: Flowise text-to-speech endpoint suffers from improper CORS configuration
Disclosed · since 30 Jun 2026 · CVE-2026-56277
AI - closed5.0Flowise CVE-2026-58057: Flowise custom MCP stdio environment variable bypass leads to RCE
Disclosed · since 28 Jun 2026 · CVE-2026-58057
AI - closed9.3Flowise Flowise Authentication Bypass Vulnerability CVE-2025-71327
Disclosed · since 25 Jun 2026 · CVE-2025-71327
AI - closed10.0Flowise Flowise Path Traversal File Overwrite Vulnerability CVE-2025-71338
Disclosed · since 25 Jun 2026 · CVE-2025-71338
AI - closed9.8Flowise Flowise Arbitrary File Upload Vulnerability CVE-2025-71333
Disclosed · No patch yet · since 25 Jun 2026 · updated 26 Jun 2026 · CVE-2025-71333
AI - closed8.6Flowise CVE-2025-71335: Session invalidation failure after password change in Flowise
Disclosed · since 25 Jun 2026 · CVE-2025-71335
AI - closed8.7Flowise CVE-2025-71328: Unverified password change vulnerability in Flowise
Disclosed · since 25 Jun 2026 · CVE-2025-71328
AI - closed8.7Flowise CVE-2025-71324: Arbitrary file read vulnerability in Flowise
Disclosed · since 25 Jun 2026 · CVE-2025-71324
AI - closed9.8Flowise CVE-2025-71336: Unsandboxed remote code execution in Flowise Custom MCP
Disclosed · Patched · since 25 Jun 2026 · updated 26 Jun 2026 · CVE-2025-71336
AI - closed9.8Flowise CVE-2025-71334: Arbitrary file access vulnerability in Flowise
Disclosed · Patched · since 25 Jun 2026 · updated 26 Jun 2026 · CVE-2025-71334
AI - closed9.9Flowise CVE-2026-56274: Flowise command injection vulnerability in Custom MCP Server
Disclosed · since 23 Jun 2026 · CVE-2026-56274
AI - closed8.7Flowise Flowise Unverified Email Change Vulnerability
Disclosed · since 23 Jun 2026 · CVE-2025-71337
AI - closed6.3Flowise CVE-2026-12821: Path traversal vulnerability in Flowise S3 loader
Disclosed · since 22 Jun 2026 · CVE-2026-12821
AI - closed6.0Flowise CVE-2026-56276: Flowise mass assignment vulnerability in user endpoint
Disclosed · since 20 Jun 2026 · CVE-2026-56276
AI - closed6.9Flowise CVE-2026-56267: Flowise information exposure vulnerability in forgot-password endpoint
Disclosed · since 20 Jun 2026 · CVE-2026-56267
AI - closed6.1Flowise CVE-2025-71331: Flowise cross-site scripting flaw in chat messages and agent functions
Disclosed · since 20 Jun 2026 · CVE-2025-71331
AI - closed7.7Flowise CVE-2026-56268: Flowise cross-workspace chatflow information disclosure
Disclosed · since 20 May 2026 · updated 22 Jun 2026 · CVE-2026-56268
AI - closedFlowise Flowise hardcoded CORS wildcard on TTS endpoint
Disclosed · since 20 May 2026
AI - closedFlowise Flowise mass assignment password override vulnerability
Disclosed · since 20 May 2026
AI - closed7.6Flowise CVE-2026-46441: FlowiseAI Mass Assignment Vulnerability in Assistant Update
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46441
AI - closed7.0Flowise CVE-2026-46443: FlowiseAI Vulnerable to Credential Data Leak
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46443
AI - closed7.6Flowise CVE-2026-42861: FlowiseAI Mass Assignment Vulnerability in Variable Updates
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-42861
AI - closed7.5Flowise CVE-2026-46440: FlowiseAI Exposes Basic Auth Credentials via API
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46440
AI - closed8.8Flowise CVE-2026-46444: FlowiseAI Vector Store Missing Permission Checks
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46444
AI - closed7.6Flowise CVE-2026-42862: FlowiseAI Mass Assignment in Tool Update Endpoint
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-42862
AI - closed8.8Flowise CVE-2026-46477: FlowiseAI Mass Assignment Dataset Takeover
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46477
AI - closedFlowise Flowise MCP security bypass leads to RCE
Disclosed · since 14 May 2026
AI - closed8.8Flowise CVE-2026-46480: FlowiseAI mass-assignment allows cross-workspace evaluator takeover
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46480
AI - closed8.8Flowise CVE-2026-46479: FlowiseAI mass-assignment allows cross-workspace evaluation takeover
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46479
AI - closed7.6Flowise CVE-2026-42863: FlowiseAI mass assignment allows cross-workspace reassignment
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-42863
AI - closed9.4Flowise CVE-2026-46442: FlowiseAI NodeVM sandbox escape and RCE vulnerability
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46442
AI - closed7.7Flowise FlowiseAI CustomTemplate Mass Assignment Workspace Takeover
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46476
AI - closed8.8Flowise FlowiseAI Assistant Mass Assignment Workspace Takeover
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46475
AI - closed8.8Flowise FlowiseAI DatasetRow Mass Assignment Workspace Takeover
Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46478
AI - closed5.3Flowise CVE-2026-8027: Authorization bypass in FlowiseAI Flowise user controller handler
Disclosed · since 6 May 2026 · CVE-2026-8027
AI - closed3.7Flowise CVE-2026-8028: Information disclosure vulnerability in FlowiseAI Flowise
Disclosed · since 6 May 2026 · CVE-2026-8028
AI - closed6.3Flowise Flowise API response handler exposes bcrypt password hashes
Disclosed · since 6 May 2026 · CVE-2026-8026
AI - closed7.5Flowise CVE-2026-41275: Cleartext password reset link in Flowise
Disclosed · since 23 Apr 2026 · CVE-2026-41275
AI - closed9.8Flowise CVE-2026-41264: Flowise CSV Agent Prompt Injection RCE
Disclosed · since 21 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41264
AI - closed9.8Flowise CVE-2026-41265: Flowise Airtable Agent Remote Code Execution
Disclosed · since 18 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41265
AI - closed8.7Flowise CVE-2026-41278: Flowise Public Endpoints Expose Plaintext API Keys
Disclosed · since 17 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41278
AI - closed8.2Flowise CVE-2026-41279: Flowise Unauthenticated TTS Endpoint Accepts Arbitrary Credential IDs
Disclosed · since 17 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41279
AI - closed8.8Flowise CVE-2026-41277: Flowise Mass Assignment Leads to Cross-Workspace Object Takeover
Disclosed · since 17 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41277
AI - closed7.1Flowise CVE-2026-41270: Flowise SSRF Protection Bypass via Built-in HTTP Modules
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41270
AI - closed5.3Flowise CVE-2026-56270: Flowise Unauthenticated Information Disclosure of OAuth Secrets
Disclosed · since 16 Apr 2026 · updated 24 Jun 2026 · CVE-2026-56270
AI - closed7.7Flowise CVE-2026-41268: Flowise Parameter Override Bypass Remote Command Execution
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41268
AI - closed8.3Flowise CVE-2026-41138: Flowise AirtableAgent Prompt Injection RCE
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41138
AI - closedFlowise Flowise Weak Default Express Session Secret
Disclosed · since 16 Apr 2026
AI - closed7.7Flowise CVE-2026-41266: Flowise Sensitive Data Leak in Chatbot Config
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41266
AI - closedFlowise Flowise Vector Store Path Traversal Vulnerability
Disclosed · since 16 Apr 2026
AI - closed9.8Flowise CVE-2026-41276: Flowise resetPassword Authentication Bypass
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41276
AI - closed7.1Flowise CVE-2026-41272: Flowise SSRF Protection Bypass via DNS Rebinding and Default Insecure Config
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41272
AI - closed5.3Flowise CVE-2026-43995: Flowise SSRF Protection Bypass via Direct HTTP Client Usage
Disclosed · since 16 Apr 2026 · updated 11 May 2026 · CVE-2026-43995
AI - closedFlowise Flowise Weak Default JWT Secrets Vulnerability
Disclosed · since 16 Apr 2026
AI - closed5.6Flowise CVE-2026-56269: Flowise Weak Default Token Hash Secret Vulnerability
Disclosed · since 16 Apr 2026 · updated 24 Jun 2026 · CVE-2026-56269
AI - closed8.7Flowise CVE-2026-41274: Flowise Cypher Injection Vulnerability in GraphCypherQAChain
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41274
AI - closed9.4Flowise CVE-2026-41137: Flowise CSVAgent Code Injection RCE
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41137
AI - closed7.1Flowise CVE-2026-41271: Flowise APIChain Prompt Injection SSRF
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41271
AI - closed8.2Flowise CVE-2026-41273: Flowise OAuth 2.0 Access Token Disclosure
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41273
AI - closed9.9Flowise CVE-2026-40933: Flowise Authenticated RCE via MCP Adapters
Disclosed · since 16 Apr 2026 · updated 21 Apr 2026 · CVE-2026-40933
AI - closed8.1Flowise CVE-2026-41267: Flowise account registration mass assignment vulnerability
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41267
AI - closed7.1Flowise CVE-2026-41269: Flowise file upload validation bypass leads to RCE
Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41269
AI - closed7.1Flowise CVE-2026-56275: Flowise Execute Flow node server-side request forgery
Disclosed · since 16 Apr 2026 · updated 23 Jun 2026 · CVE-2026-56275
AI - closed7.1Flowise CVE-2026-31829: Flowise Affected by Server-Side Request Forgery in HTTP Node
Disclosed · since 11 Mar 2026 · updated 11 Mar 2026 · CVE-2026-31829
AI - closed7.7Flowise CVE-2026-30824: Flowise Missing Authentication on NVIDIA NIM Endpoints
Disclosed · since 6 Mar 2026 · updated 7 Mar 2026 · CVE-2026-30824
AI - closed8.2Flowise CVE-2026-30821: Flowise Arbitrary File Upload via MIME Spoofing
Disclosed · since 6 Mar 2026 · updated 7 Mar 2026 · CVE-2026-30821
AI - closed8.8Flowise CVE-2026-30823: Flowise IDOR and SSO Configuration Vulnerability
Disclosed · since 6 Mar 2026 · updated 7 Mar 2026 · CVE-2026-30823
AI - closed8.7Flowise CVE-2026-30820: Flowise Authorization Bypass via Spoofed Header
Disclosed · since 6 Mar 2026 · updated 7 Mar 2026 · CVE-2026-30820
AI - closed7.7Flowise CVE-2026-30822: Flowise Allows Mass Assignment on Leads Endpoint
Disclosed · since 6 Mar 2026 · updated 7 Mar 2026 · CVE-2026-30822
AI - closedFlowise Flowise Vulnerable to PII Disclosure
Disclosed · since 5 Mar 2026
AI - closed5.6Flowise CVE-2026-56272: Flowise Insufficient Password Salt Rounds
Disclosed · since 5 Mar 2026 · updated 24 Jun 2026 · CVE-2026-56272
AI - closedFlowise Flowise authentication bypass using unprotected registration endpoint
Disclosed · since 17 Nov 2025
AI - closedFlowise Flowise fails to invalidate sessions after password changes
Disclosed · since 14 Nov 2025
AI - closedFlowise FlowiseAI Pre-Authentication Arbitrary Code Execution
Disclosed · since 17 Oct 2025
AI - closed8.4Flowise CVE-2025-34267: Flowise Sandbox Escape and RCE Vulnerability
Disclosed · since 14 Oct 2025 · CVE-2025-34267
AI - closedFlowise Flowise vulnerable to arbitrary file exposure
Disclosed · since 10 Oct 2025
AI - closed9.9Flowise CVE-2025-61913: Flowise File Path Traversal Vulnerability
Disclosed · since 8 Oct 2025 · updated 9 Oct 2025 · CVE-2025-61913
AI - closed9.8Flowise CVE-2025-55346: Flowise vulnerable to RCE via Dynamic function constructor injection
Disclosed · since 6 Oct 2025 · CVE-2025-55346
AI - closed8.3Flowise CVE-2025-61687: Flowise file upload vulnerability leads to RCE
Disclosed · since 6 Oct 2025 · updated 8 Oct 2025 · CVE-2025-61687
AI - closedFlowise Flowise vulnerable to XSS
Disclosed · since 3 Oct 2025
AI - closed9.3Flowise CVE-2025-50538: Flowise iframe cross-site scripting vulnerability
Disclosed · since 6 Oct 2025 · updated 6 Oct 2025 · CVE-2025-50538
AI - closed5.3Flowise CVE-2025-29192: Flowise chat log cross-site scripting vulnerability
Disclosed · since 6 Oct 2025 · updated 6 Oct 2025 · CVE-2025-29192
AI - closed9.6Flowise CVE-2025-59434: Cross-tenant environment variable exposure in Flowise Cloud
Disclosed · since 22 Sep 2025 · CVE-2025-59434
AI - closedFlowise Flowise Arbitrary File Read
Disclosed · since 15 Sep 2025
AI - closed9.1Flowise CVE-2025-57164: FlowiseAI Pre-Auth Arbitrary Code Execution
Disclosed · since 15 Sep 2025 · updated 17 Oct 2025 · CVE-2025-57164
AI - closedFlowise Flowise unsandboxed remote code execution via Custom MCP
Disclosed · since 15 Sep 2025
AI - closedFlowise Flowise arbitrary file access via missing chat flow id validation
Disclosed · since 15 Sep 2025
AI - closed10.0Flowise CVE-2025-59528: Flowise remote code execution via CustomMCP node
Disclosed · since 15 Sep 2025 · updated 22 Sep 2025 · CVE-2025-59528
AI - closed7.5Flowise CVE-2025-59527: Server-Side Request Forgery vulnerability in Flowise
Disclosed · since 22 Sep 2025 · updated 22 Sep 2025 · CVE-2025-59527
AI - closed9.8Flowise CVE-2025-58434: Flowise Unauthenticated Password Reset Vulnerability
Disclosed · since 12 Sep 2025 · CVE-2025-58434
AI - closed9.8Flowise CVE-2025-8943: Flowise OS command remote code execution
Disclosed · since 14 Aug 2025 · CVE-2025-8943
AI - closed7.6Flowise CVE-2025-29189: Flowise SQL Injection Vulnerability
Disclosed · since 9 Apr 2025 · CVE-2025-29189
AI - closed5.9Flowise Flowise SQL Injection Vulnerability in Import Chatflows API
Disclosed · since 24 Jun 2026 · updated 24 Jun 2026 · CVE-2025-71332
AI - closedFlowise Flowise allows arbitrary file write to RCE
Disclosed · since 14 Mar 2025
AI - closedFlowise Flowise Pre-Authentication Arbitrary File Upload Vulnerability
Disclosed · since 13 Mar 2025
AI - closed8.9Flowise Arbitrary File Upload Vulnerability in FlowiseAI Flowise
Disclosed · since 4 Mar 2025 · updated 5 Mar 2025 · CVE-2025-26319
AI - closed8.6Flowise CVE-2024-58351: Flowise OverrideConfig security vulnerability
Disclosed · since 21 Nov 2024 · updated 20 Jun 2026 · CVE-2024-58351
AI - closed9.6Flowise CVE-2024-9148: Flowise and Flowise Chat Embed stored XSS vulnerability
Disclosed · since 25 Sep 2024 · CVE-2024-9148
AI - closed8.6Flowise CVE-2024-8181: Flowise authentication bypass vulnerability
Disclosed · since 27 Aug 2024 · CVE-2024-8181
AI - closed8.7Flowise CVE-2024-8182: Flowise unauthenticated denial of service vulnerability
Disclosed · since 27 Aug 2024 · CVE-2024-8182
AI - closed8.7Flowise CVE-2024-36420: Flowise Path Injection Vulnerability
Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-36420
AI - closed6.1Flowise CVE-2024-36422: Flowise Cross-site Scripting Vulnerability
Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-36422
AI - closed6.1Flowise CVE-2024-37146: Flowise Cross-site Scripting Vulnerability
Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-37146
AI - closed6.1Flowise CVE-2024-37145: Flowise Cross-site Scripting Vulnerability
Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-37145
AI - closed6.1Flowise CVE-2024-36423: Flowise reflected cross-site scripting
Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-36423
AI - closed8.7Flowise CVE-2024-36421: Flowise CORS misconfiguration vulnerability
Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-36421
AI - closed7.6Flowise Flowise Remote Code Injection Vulnerability
Disclosed · since 29 Apr 2024 · CVE-2024-31621
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.