Flowise vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FL

Product

Flowise

by Flowise · last CVE Jul 12, 2026

25

CVEs

0

On KEV

9.9

Max CVSS

0

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 9High 8Medium 8Low 0

Severity

All severities25 Critical9 High8 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Flowise to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-71328	8.8	0%	Jun 25	Flowise - Unverified Password Change via Account Settings Affected: before 3.0.10
CVE-2025-71332	8.8	1%	Jun 24	Flowise - SQL Injection in importChatflows API via chatflow.id Parameter Affected: through 2.2.7
CVE-2025-71337	8.3	0%	Jun 23	Flowise - Unverified Email Change via Account Profile Endpoint Affected: before 3.0.10
CVE-2025-71335	8.1	0%	Jun 25	Flowise - Session Invalidation Failure After Password Change Affected: before 3.0.10
CVE-2026-56268	7.7	0%	Jun 22	Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint Affected: before 3.1.2
CVE-2025-71324	7.5	2%	Jun 25	Flowise - Arbitrary File Read via chatId Parameter Affected: before 3.0.6
CVE-2026-56270	7.5	2%	Jun 24	Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint Affected: before 3.1.0
CVE-2026-56275	7.1	0%	Jun 23	Flowise - Server-Side Request Forgery via Execute Flow Base URL Affected: before 3.1.0; before 3.1.0