Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint

Flowise: Mass Assignment in `/api/v1/leads` Endpoint

Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints

Flowise <= 2.2.3 is vulnerable to SQL Injection

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component

Flowise through 3.1.4 Missing Authorization via upsert-history

Flowise before 3.1.4 NoSQL Injection via sessionId

Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover

Flowise before 3.1.4 Denial of Service via text-to-speech/abort

Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download

Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint

Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

Flowise - Arbitrary File Read via chatId Parameter

Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint

Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

Flowise: Password Reset Link Sent Over Unsecured HTTP

Flowise: Sensitive Data Leak in public-chatbotConfig

FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

Flowise Denial of Service

GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts

GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

Flowise through 3.1.4 Missing Authorization via Chat Message Routes

Flowise before 3.1.4 Server-Side Request Forgery via document loaders

Flowise before 3.1.4 Authorization Bypass via openai-realtime

Flowise before 3.1.4 Cross-Tenant Authorization Bypass

Flowise - Server-Side Request Forgery via Execute Flow Base URL

Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)