flowiseai Vulnerability Advisory Catalog

Total 86 security vulnerabilities recorded for flowiseai software and firmware.

← Back to All Vendors
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset create and update mass-assign...

📅 2026-06-08
CVSS 8.8 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass...

📅 2026-06-08
CVSS 8.8 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, assistant create and update mass-assi...

📅 2026-06-08
CVSS 8.8 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRUD endpoints for OpenAI Assista...

📅 2026-06-08
CVSS 8.8 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when credentials are fetched with a c...

📅 2026-06-08
CVSS 6.5 Dossier →
CVE-2026-46442 CRITICAL
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lac...

📅 2026-06-08
CVSS 9.9 Dossier →
CVE-2026-46441 CRITICAL
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exist...

📅 2026-06-08
CVSS 9.6 Dossier →
CVE-2026-46440 CRITICAL
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, the checkBasicAuth endpoint validates...

📅 2026-06-08
CVSS 9.1 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exist...

📅 2026-06-08
CVSS 8.1 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exist...

📅 2026-06-08
CVSS 5.0 Dossier →
CVE-2026-42861 CRITICAL
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exist...

📅 2026-06-08
CVSS 9.6 Dossier →
CVE-2026-43995 CRITICAL
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import...

📅 2026-05-11
CVSS 9.8 Dossier →
Component: flowise

A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/server/src/enterprise/services/a...

📅 2026-05-06
CVSS 3.7 Dossier →
CVE-2026-8027 MEDIUM
Component: flowise

A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Con...

📅 2026-05-06
CVSS 4.3 Dossier →
Component: flowise

A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packages/server/src/enterprise/servi...

📅 2026-05-06
CVSS 3.7 Dossier →
CVE-2026-41274 CRITICAL
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-pro...

📅 2026-04-23
CVSS 9.8 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint (POST ...

📅 2026-04-23
CVSS 7.5 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GET /api/v1/public-chatflows/:id endpoint...

📅 2026-04-23
CVSS 7.5 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the Docume...

📅 2026-04-23
CVSS 8.8 Dossier →
CVE-2026-41276 CRITICAL
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerability allows remote attackers to...

📅 2026-04-23
CVSS 9.8 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password reset functionality on cloud.flo...

📅 2026-04-23
CVSS 7.5 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise contains an authentication bypass vul...

📅 2026-04-23
CVSS 8.2 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the core security wrappers (secureAxiosReques...

📅 2026-04-23
CVSS 7.1 Dossier →
Component: flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) vulnerab...

📅 2026-04-23
CVSS 8.3 Dossier →
Page 2 of 4 (86 Total Records)