agentprime: flowise

agentprime: flowiseEvery new CVE for flowise.https://agentprime.io/CVE-2026-100610: Flowise through 3.1.4 Missing Authorization via upsert-historyhttps://agentprime.io/advisories/CVE-2026-100610/https://agentprime.io/advisories/CVE-2026-100610/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:52 GMTCVECVE-2026-100609: Flowise through 3.1.4 Insecure Direct Object Reference via Credentialhttps://agentprime.io/advisories/CVE-2026-100609/https://agentprime.io/advisories/CVE-2026-100609/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:51 GMTCVECVE-2026-100608: Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboardhttps://agentprime.io/advisories/CVE-2026-100608/https://agentprime.io/advisories/CVE-2026-100608/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:51 GMTCVECVE-2026-100607: Flowise through 3.1.4 Authentication Bypass via Email-Only SSOhttps://agentprime.io/advisories/CVE-2026-100607/https://agentprime.io/advisories/CVE-2026-100607/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:50 GMTCVEcriticalCVE-2026-100606: Flowise through 3.1.4 Authentication Bypass via SSO Email Matchhttps://agentprime.io/advisories/CVE-2026-100606/https://agentprime.io/advisories/CVE-2026-100606/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:49 GMTCVEcriticalCVE-2026-100605: Flowise through 3.1.4 Missing Authorization via Chat Message Routeshttps://agentprime.io/advisories/CVE-2026-100605/https://agentprime.io/advisories/CVE-2026-100605/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:49 GMTCVECVE-2026-91938: Flowise before 3.1.4 Server-Side Request Forgery via document loadershttps://agentprime.io/advisories/CVE-2026-91938/https://agentprime.io/advisories/CVE-2026-91938/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:18:00 GMTCVECVE-2026-91937: Flowise before 3.1.4 NoSQL Injection via sessionIdhttps://agentprime.io/advisories/CVE-2026-91937/https://agentprime.io/advisories/CVE-2026-91937/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:59 GMTCVECVE-2026-91936: Flowise before 3.1.4 Script Injection via Docker Workflowshttps://agentprime.io/advisories/CVE-2026-91936/https://agentprime.io/advisories/CVE-2026-91936/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:59 GMTCVECVE-2026-91935: Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodeshttps://agentprime.io/advisories/CVE-2026-91935/https://agentprime.io/advisories/CVE-2026-91935/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:58 GMTCVECVE-2026-91934: Flowise before 3.1.4 Remote Code Execution via SQL Database Chainhttps://agentprime.io/advisories/CVE-2026-91934/https://agentprime.io/advisories/CVE-2026-91934/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:57 GMTCVECVE-2026-91933: Flowise before 3.1.4 Authorization Bypass via openai-realtimehttps://agentprime.io/advisories/CVE-2026-91933/https://agentprime.io/advisories/CVE-2026-91933/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:56 GMTCVECVE-2026-91932: Flowise before 3.1.4 Remote Code Execution via cwd Parameterhttps://agentprime.io/advisories/CVE-2026-91932/https://agentprime.io/advisories/CVE-2026-91932/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:56 GMTCVEcriticalCVE-2026-91931: Flowise before 3.1.4 Remote Code Execution via Custom MCP npxhttps://agentprime.io/advisories/CVE-2026-91931/https://agentprime.io/advisories/CVE-2026-91931/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:55 GMTCVEcriticalCVE-2026-91930: Flowise before 3.1.4 Cross-Tenant Organization Admin Takeoverhttps://agentprime.io/advisories/CVE-2026-91930/https://agentprime.io/advisories/CVE-2026-91930/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:54 GMTCVECVE-2026-91929: Flowise before 3.1.4 Cross-Tenant Authorization Bypasshttps://agentprime.io/advisories/CVE-2026-91929/https://agentprime.io/advisories/CVE-2026-91929/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:17:54 GMTCVECVE-2026-90580: FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-90580/https://agentprime.io/advisories/CVE-2026-90580/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 19:15:09 GMTCVECVE-2026-90535: Flowise before 3.1.4 Denial of Service via text-to-speech/aborthttps://agentprime.io/advisories/CVE-2026-90535/https://agentprime.io/advisories/CVE-2026-90535/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:44 GMTCVECVE-2026-90534: Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-methodhttps://agentprime.io/advisories/CVE-2026-90534/https://agentprime.io/advisories/CVE-2026-90534/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:43 GMTCVECVE-2026-90533: Flowise before 3.1.4 Broken Access Control via organizationuserhttps://agentprime.io/advisories/CVE-2026-90533/https://agentprime.io/advisories/CVE-2026-90533/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:42 GMTCVECVE-2026-73602: Flowise before 3.1.3 Sandbox Escape to RCEhttps://agentprime.io/advisories/CVE-2026-73602/https://agentprime.io/advisories/CVE-2026-73602/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 11:28:08 GMTCVEcriticalCVE-2026-73601: Flowise before 3.1.3 Remote Code Execution via Custom MCPhttps://agentprime.io/advisories/CVE-2026-73601/https://agentprime.io/advisories/CVE-2026-73601/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 11:28:08 GMTCVEcriticalCVE-2026-73486: Flowise before 3.1.3 Code Injection via CSV Agent customReadCSVhttps://agentprime.io/advisories/CVE-2026-73486/https://agentprime.io/advisories/CVE-2026-73486/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 11:28:06 GMTCVEcriticalCVE-2026-73485: Flowise before 3.1.3 Remote Code Execution via Airtable Agenthttps://agentprime.io/advisories/CVE-2026-73485/https://agentprime.io/advisories/CVE-2026-73485/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 11:28:05 GMTCVEcriticalCVE-2026-73484: Flowise before 3.1.3 Sandbox Escape via Pandas Methodshttps://agentprime.io/advisories/CVE-2026-73484/https://agentprime.io/advisories/CVE-2026-73484/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 11:28:04 GMTCVECVE-2026-71962: Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/downloadhttps://agentprime.io/advisories/CVE-2026-71962/https://agentprime.io/advisories/CVE-2026-71962/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 18:26:18 GMTCVECVE-2026-67620: Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-Listhttps://agentprime.io/advisories/CVE-2026-67620/https://agentprime.io/advisories/CVE-2026-67620/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Aug 2026 16:03:39 GMTCVECVE-2026-70636: Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpointhttps://agentprime.io/advisories/CVE-2026-70636/https://agentprime.io/advisories/CVE-2026-70636/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:31:55 GMTCVECVE-2026-67622: Flowise 3.1.4 IDOR in OpenAI Assistants Integrationhttps://agentprime.io/advisories/CVE-2026-67622/https://agentprime.io/advisories/CVE-2026-67622/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:31:34 GMTCVECVE-2026-67621: Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpointshttps://agentprime.io/advisories/CVE-2026-67621/https://agentprime.io/advisories/CVE-2026-67621/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:31:13 GMTCVECVE-2026-58057: Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivityhttps://agentprime.io/advisories/CVE-2026-58057/https://agentprime.io/advisories/CVE-2026-58057/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 Jun 2026 01:32:58 GMTCVECVE-2026-12821: FlowiseAI Flowise S3 Document Loader S3.ts path traversalhttps://agentprime.io/advisories/CVE-2026-12821/https://agentprime.io/advisories/CVE-2026-12821/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 21 Jun 2026 23:15:08 GMTCVECVE-2026-8028: FlowiseAI Flowise Endpoint account.service.ts verify information disclosurehttps://agentprime.io/advisories/CVE-2026-8028/https://agentprime.io/advisories/CVE-2026-8028/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 14:15:10 GMTCVECVE-2026-8027: FlowiseAI Flowise User Controller authorizationhttps://agentprime.io/advisories/CVE-2026-8027/https://agentprime.io/advisories/CVE-2026-8027/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 13:45:10 GMTCVECVE-2025-59434: Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Functionhttps://agentprime.io/advisories/CVE-2025-59434/https://agentprime.io/advisories/CVE-2025-59434/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Sep 2025 19:39:03 GMTCVEcritical