# Flowise.

Every CVE that names Flowise among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Flowise through 3.1.4 Missing Authorization via upsert-history](https://agentprime.io/advisories/CVE-2026-100610.md)
  `CVE-2026-100610` · CVE record: FlowiseAI Flowise · CVSS 7.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control
- [Flowise through 3.1.4 Insecure Direct Object Reference via Credential](https://agentprime.io/advisories/CVE-2026-100609.md)
  `CVE-2026-100609` · CVE record: FlowiseAI Flowise · CVSS 7.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control
- [Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard](https://agentprime.io/advisories/CVE-2026-100608.md)
  `CVE-2026-100608` · CVE record: FlowiseAI Flowise · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control
- [Flowise through 3.1.4 Authentication Bypass via Email-Only SSO](https://agentprime.io/advisories/CVE-2026-100607.md)
  `CVE-2026-100607` · CVE record: FlowiseAI Flowise · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2026 · Tags: Authentication bypass
- [Flowise through 3.1.4 Authentication Bypass via SSO Email Match](https://agentprime.io/advisories/CVE-2026-100606.md)
  `CVE-2026-100606` · CVE record: FlowiseAI Flowise · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2026 · Tags: Authentication bypass
- [Flowise through 3.1.4 Missing Authorization via Chat Message Routes](https://agentprime.io/advisories/CVE-2026-100605.md)
  `CVE-2026-100605` · CVE record: FlowiseAI Flowise · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2026 · Tags: Broken access control
- [Flowise before 3.1.4 Server-Side Request Forgery via document loaders](https://agentprime.io/advisories/CVE-2026-91938.md)
  `CVE-2026-91938` · CVE record: FlowiseAI Flowise · CVSS 7.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise before 3.1.4 NoSQL Injection via sessionId](https://agentprime.io/advisories/CVE-2026-91937.md)
  `CVE-2026-91937` · CVE record: FlowiseAI Flowise · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Other injection
- [Flowise before 3.1.4 Script Injection via Docker Workflows](https://agentprime.io/advisories/CVE-2026-91936.md)
  `CVE-2026-91936` · CVE record: FlowiseAI Flowise · CVSS 8.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Command injection
- [Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes](https://agentprime.io/advisories/CVE-2026-91935.md)
  `CVE-2026-91935` · CVE record: FlowiseAI Flowise · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise before 3.1.4 Remote Code Execution via SQL Database Chain](https://agentprime.io/advisories/CVE-2026-91934.md)
  `CVE-2026-91934` · CVE record: FlowiseAI Flowise · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Path traversal
- [Flowise before 3.1.4 Authorization Bypass via openai-realtime](https://agentprime.io/advisories/CVE-2026-91933.md)
  `CVE-2026-91933` · CVE record: FlowiseAI Flowise · CVSS 7.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control
- [Flowise before 3.1.4 Remote Code Execution via cwd Parameter](https://agentprime.io/advisories/CVE-2026-91932.md)
  `CVE-2026-91932` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-20
- [Flowise before 3.1.4 Remote Code Execution via Custom MCP npx](https://agentprime.io/advisories/CVE-2026-91931.md)
  `CVE-2026-91931` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Command injection
- [Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover](https://agentprime.io/advisories/CVE-2026-91930.md)
  `CVE-2026-91930` · CVE record: FlowiseAI Flowise · CVSS 7.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation
- [Flowise before 3.1.4 Cross-Tenant Authorization Bypass](https://agentprime.io/advisories/CVE-2026-91929.md)
  `CVE-2026-91929` · CVE record: FlowiseAI Flowise · CVSS 7.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control
- [FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery](https://agentprime.io/advisories/CVE-2026-90580.md)
  `CVE-2026-90580` · CVE record: FlowiseAI Flowise · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise before 3.1.4 Denial of Service via text-to-speech/abort](https://agentprime.io/advisories/CVE-2026-90535.md)
  `CVE-2026-90535` · CVE record: FlowiseAI Flowise · CVSS 6.3 Medium · Not analysed yet · Published 12 Sept 2026 · Tags: Broken access control
- [Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method](https://agentprime.io/advisories/CVE-2026-90534.md)
  `CVE-2026-90534` · CVE record: FlowiseAI Flowise · CVSS 6.1 Medium · Not analysed yet · Published 12 Sept 2026 · Tags: Broken access control
- [Flowise before 3.1.4 Broken Access Control via organizationuser](https://agentprime.io/advisories/CVE-2026-90533.md)
  `CVE-2026-90533` · CVE record: FlowiseAI Flowise · CVSS 6.0 Medium · Not analysed yet · Published 12 Sept 2026 · Tags: Broken access control
- [Flowise before 3.1.3 Sandbox Escape to RCE](https://agentprime.io/advisories/CVE-2026-73602.md)
  `CVE-2026-73602` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Remote Code Execution via Custom MCP](https://agentprime.io/advisories/CVE-2026-73601.md)
  `CVE-2026-73601` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV](https://agentprime.io/advisories/CVE-2026-73486.md)
  `CVE-2026-73486` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Remote Code Execution via Airtable Agent](https://agentprime.io/advisories/CVE-2026-73485.md)
  `CVE-2026-73485` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Sandbox Escape via Pandas Methods](https://agentprime.io/advisories/CVE-2026-73484.md)
  `CVE-2026-73484` · CVE record: FlowiseAI Flowise · CVSS 8.6 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-184
- [Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download](https://agentprime.io/advisories/CVE-2026-71962.md)
  `CVE-2026-71962` · CVE record: FlowiseAI Flowise · CVSS 8.7 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control
- [Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List](https://agentprime.io/advisories/CVE-2026-67620.md)
  `CVE-2026-67620` · CVE record: FlowiseAI Flowise · CVSS 6.3 Medium · Not analysed yet · Published 8 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint](https://agentprime.io/advisories/CVE-2026-70636.md)
  `CVE-2026-70636` · CVE record: FlowiseAI Flowise · CVSS 8.7 High · Not analysed yet · Published 6 Aug 2026 · Tags: Broken access control
- [Flowise 3.1.4 IDOR in OpenAI Assistants Integration](https://agentprime.io/advisories/CVE-2026-67622.md)
  `CVE-2026-67622` · CVE record: FlowiseAI Flowise · CVSS 8.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Broken access control
- [Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints](https://agentprime.io/advisories/CVE-2026-67621.md)
  `CVE-2026-67621` · CVE record: FlowiseAI Flowise · CVSS 7.2 High · Not analysed yet · Published 6 Aug 2026 · Tags: Broken access control
- [Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity](https://agentprime.io/advisories/CVE-2026-58057.md)
  `CVE-2026-58057` · CVE record: Flowise Flowise · CVSS 2.3 Low · Not analysed yet · Published 28 Jun 2026 · Tags: CWE-178
- [FlowiseAI Flowise S3 Document Loader S3.ts path traversal](https://agentprime.io/advisories/CVE-2026-12821.md)
  `CVE-2026-12821` · CVE record: FlowiseAI Flowise · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Path traversal
- [FlowiseAI Flowise Endpoint account.service.ts verify information disclosure](https://agentprime.io/advisories/CVE-2026-8028.md)
  `CVE-2026-8028` · CVE record: FlowiseAI Flowise · CVSS 6.3 Medium · Not analysed yet · Published 6 May 2026 · Tags: Information disclosure, Broken access control
- [FlowiseAI Flowise User Controller authorization](https://agentprime.io/advisories/CVE-2026-8027.md)
  `CVE-2026-8027` · CVE record: FlowiseAI Flowise · CVSS 5.3 Medium · Not analysed yet · Published 6 May 2026 · Tags: Broken access control
- [Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function](https://agentprime.io/advisories/CVE-2025-59434.md)
  `CVE-2025-59434` · CVE record: FlowiseAI Flowise · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2025 · Tags: Information disclosure, Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=flowise>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/flowise/>. Everything for agents: <https://agentprime.io/llms.txt>.