mass-assignment

Records14

1. closed
   Flowise Flowise mass assignment password override vulnerability

   Patch now · Disclosed · since 20 May 2026

   AI
2. closed7.6
   Flowise CVE-2026-46441: FlowiseAI Mass Assignment Vulnerability in Assistant Update

   Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46441

   AI
3. closed7.6
   Flowise CVE-2026-42861: FlowiseAI Mass Assignment Vulnerability in Variable Updates

   Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-42861

   AI
4. closed7.6
   Flowise CVE-2026-42862: FlowiseAI Mass Assignment in Tool Update Endpoint

   Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-42862

   AI
5. closed8.8
   Flowise CVE-2026-46477: FlowiseAI Mass Assignment Dataset Takeover

   Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46477

   AI
6. closed8.8
   Flowise CVE-2026-46480: FlowiseAI mass-assignment allows cross-workspace evaluator takeover

   Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46480

   AI
7. closed8.8
   Flowise CVE-2026-46479: FlowiseAI mass-assignment allows cross-workspace evaluation takeover

   Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46479

   AI
8. closed7.6
   Flowise CVE-2026-42863: FlowiseAI mass assignment allows cross-workspace reassignment

   Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-42863

   AI
9. closed5.4
   Open WebUI CVE-2026-45396: Open WebUI Mass Assignment User ID Spoofing

   Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45396

   AI
10. closed7.7
    Flowise FlowiseAI CustomTemplate Mass Assignment Workspace Takeover

    Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46476

    AI
11. closed8.8
    Flowise FlowiseAI Assistant Mass Assignment Workspace Takeover

    Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46475

    AI
12. closed8.8
    Flowise FlowiseAI DatasetRow Mass Assignment Workspace Takeover

    Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46478

    AI
13. closed5.0
    Open WebUI CVE-2026-44550: Open WebUI Mass Assignment Vulnerability in Folder Creation

    Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44550

    AI
14. closed8.1
    Flowise CVE-2026-41267: Flowise account registration mass assignment vulnerability

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41267

    AI