Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service

Flowise has Remote Code Execution vulnerability

Flowise before 3.1.3 Sandbox Escape to RCE

Flowise 3.1.4 IDOR in OpenAI Assistants Integration

Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

Flowise: Authenticated RCE Via MCP Adapters

Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages

Flowise is vulnerable to arbitrary file read, arbitrary file write

An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint

Flowise before 3.1.3 Prompt Injection RCE via CSV Agent

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Flowise - Weak Default JWT Secrets in Authentication Middleware

Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API

Flowise - Unsandboxed Remote Code Execution via Custom MCP

Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint

Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

Flowise: Cypher Injection in GraphCypherQAChain

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

Flowise: AccountService resetPassword Authentication Bypass Vulnerability

Flowise: Flowise Parameter Override Bypass Remote Command Execution

Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

Flowise: Missing Authentication on NVIDIA NIM Endpoints

Flowise: Arbitrary File Upload via MIME Spoofing

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments

Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment

Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment

Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

Flowise - Session Hijacking via Weak Default Express Session Secret

Flowise - Authentication Bypass via Unprotected Registration Endpoint

Flowise: Basic Auth Credentials Exposed via API

Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

Flowise before 3.1.3 Remote Code Execution via Custom MCP

Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV

Flowise before 3.1.3 Remote Code Execution via Airtable Agent

Flowise before 3.1.3 Sandbox Escape via Puppeteer

Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Flowise RCE via SQLite Record Manager Node

Flowise: Remote Code Execution Vulnerability in CSVAgent

Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Flowise Sandbox Escape to RCE