flowise

Top products

The 15 most recently published vulnerabilities affecting flowise.

• CVE-2026-56271Flowise - Weak Default JWT Secrets in Authentication Middleware9.8Jul 12, 2026
• CVE-2026-56273Flowise - Path Traversal in Vector Store basePath Parameter6.5Jul 8, 2026
• CVE-2026-56277Flowise - Hardcoded CORS Wildcard in TTS Endpoint6.5Jun 30, 2026
• CVE-2026-56278Flowise - Session Hijacking via Weak Default Express Session Secret9.1Jun 30, 2026
• CVE-2026-58057Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity5.0Jun 28, 2026
• CVE-2025-71338Flowise - Arbitrary File Write to Remote Code Execution via document-store API10.0Jun 25, 2026
• CVE-2025-71336Flowise - Unsandboxed Remote Code Execution via Custom MCP9.8Jun 25, 2026
• CVE-2025-71335Flowise - Session Invalidation Failure After Password Change8.1Jun 25, 2026
• CVE-2025-71334Flowise - Arbitrary File Access via Missing Chat Flow ID Validation9.8Jun 25, 2026
• CVE-2025-71328Flowise - Unverified Password Change via Account Settings8.3Jun 25, 2026
• CVE-2025-71333Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint9.8Jun 25, 2026
• CVE-2025-71327Flowise - Authentication Bypass via Unprotected Registration Endpoint9.1Jun 25, 2026
• CVE-2025-71324Flowise - Arbitrary File Read via chatId Parameter7.5Jun 25, 2026
• CVE-2026-56272Flowise - Insufficient Password Salt Rounds in Bcrypt Hashing4.1Jun 24, 2026
• CVE-2026-56270Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint7.5Jun 24, 2026