Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

Flowise before 3.1.3 Remote Code Execution via Custom MCP

Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV

Flowise before 3.1.3 Remote Code Execution via Airtable Agent

Flowise before 3.1.3 Sandbox Escape via Puppeteer

Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Flowise RCE via SQLite Record Manager Node

Flowise: Remote Code Execution Vulnerability in CSVAgent

Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Flowise Sandbox Escape to RCE

Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

Flowise RCE via TypeORM DataSource

Flowise - Unverified Password Change via Account Settings

Flowise - SQL Injection in importChatflows API via chatflow.id Parameter

Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover

Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover

Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover

Flowise: Vector Store No Permission Checks

Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

Flowise: File Upload Validation Bypass in createAttachment

Flowise: Code Injection in CSVAgent leads to Authenticated RCE

Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.

Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access

Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Flowise Authorization Bypass via Spoofed x-request-from Header

FlowiseAI/Flosise has File Upload vulnerability

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

Flowise before 3.1.4 Remote Code Execution via cwd Parameter

Flowise before 3.1.4 Remote Code Execution via Custom MCP npx

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes

Flowise - Unverified Email Change via Account Profile Endpoint

Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation

Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow

Flowise before 3.1.3 Sandbox Escape via Pandas Methods

Flowise: Cross-Workspace OAuth2 Credential Metadata Leak

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

Flowise - Session Invalidation Failure After Password Change

Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment

Flowise Authentication Bypass

Flowise through 3.1.4 Authentication Bypass via Email-Only SSO

Flowise through 3.1.4 Authentication Bypass via SSO Email Match

Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List