FlowiseAI vulnerabilities

CVEs per yearBy the year they were published

1. 20249
2. 20259
3. 2026102

Newest CVEs

• CVE-2026-119978

  Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore

  FlowiseAI · Flowise

  Critical9.0
• CVE-2026-100610

  Flowise through 3.1.4 Missing Authorization via upsert-history

  FlowiseAI · Flowise

  High7.7
• CVE-2026-100609

  Flowise through 3.1.4 Insecure Direct Object Reference via Credential

  FlowiseAI · Flowise

  High7.6
• CVE-2026-100608

  Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

  FlowiseAI · Flowise

  High8.7
• CVE-2026-100607

  Flowise through 3.1.4 Authentication Bypass via Email-Only SSO

  FlowiseAI · Flowise

  Critical9.2
• CVE-2026-100606

  Flowise through 3.1.4 Authentication Bypass via SSO Email Match

  FlowiseAI · Flowise

  Critical9.2
• CVE-2026-100605

  Flowise through 3.1.4 Missing Authorization via Chat Message Routes

  FlowiseAI · Flowise

  High7.5
• CVE-2026-91938

  Flowise before 3.1.4 Server-Side Request Forgery via document loaders

  FlowiseAI · Flowise

  High7.6
• CVE-2026-91937

  Flowise before 3.1.4 NoSQL Injection via sessionId

  FlowiseAI · Flowise

  High8.7
• CVE-2026-91936

  Flowise before 3.1.4 Script Injection via Docker Workflows

  FlowiseAI · Flowise

  High8.3