Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

Flowise RCE via TypeORM DataSource

Flowise - Unverified Password Change via Account Settings

Flowise - SQL Injection in importChatflows API via chatflow.id Parameter

Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover

Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover

Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover

Flowise: Vector Store No Permission Checks

Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

Flowise: File Upload Validation Bypass in createAttachment

Flowise: Code Injection in CSVAgent leads to Authenticated RCE

Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.

Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access

Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Flowise Authorization Bypass via Spoofed x-request-from Header

FlowiseAI/Flosise has File Upload vulnerability

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

Flowise before 3.1.4 Remote Code Execution via cwd Parameter

Flowise before 3.1.4 Remote Code Execution via Custom MCP npx

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes

Flowise - Unverified Email Change via Account Profile Endpoint

Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation

Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow

Flowise before 3.1.3 Sandbox Escape via Pandas Methods

Flowise: Cross-Workspace OAuth2 Credential Metadata Leak

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

Flowise - Session Invalidation Failure After Password Change

Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment

Flowise Authentication Bypass

Flowise through 3.1.4 Authentication Bypass via Email-Only SSO

Flowise through 3.1.4 Authentication Bypass via SSO Email Match

Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List

Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint

Flowise: Mass Assignment in `/api/v1/leads` Endpoint

Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints

Flowise <= 2.2.3 is vulnerable to SQL Injection

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component

Flowise through 3.1.4 Missing Authorization via upsert-history

Flowise before 3.1.4 NoSQL Injection via sessionId

Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover

Flowise before 3.1.4 Denial of Service via text-to-speech/abort

Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download

Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint