FlowiseAI flowise-components vulnerabilities

Newest CVEs

• CVE-2026-69251

  Flowise RCE via TypeORM DataSource

  FlowiseAI · Flowise

  Critical9.0
• CVE-2026-41274

  Flowise: Cypher Injection in GraphCypherQAChain

  FlowiseAI · Flowise

  Critical9.3
• CVE-2026-41271

  Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

  FlowiseAI · Flowise

  High7.1
• CVE-2026-41272

  Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

  FlowiseAI · Flowise

  High7.1
• CVE-2026-41270

  Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

  FlowiseAI · Flowise

  High7.1
• CVE-2026-41137

  Flowise: Code Injection in CSVAgent leads to Authenticated RCE

  FlowiseAI · Flowise

  Critical9.4
• CVE-2026-40933

  Flowise: Authenticated RCE Via MCP Adapters

  FlowiseAI · Flowise

  Critical10.0