Product by FlowiseAI

    Flowise

    146 known vulnerabilities in Flowise (FlowiseAI), 0 of them actively exploited (CISA KEV).

    Key figures

    146

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    56

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Flowise (FlowiseAI)
    CriticalCVE-2026-46442

    Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

    		9.9
    CriticalCVE-2026-30824

    Flowise: Missing Authentication on NVIDIA NIM Endpoints

    also in 1 other product

    		9.8
    CriticalCVE-2026-41268

    Flowise: Flowise Parameter Override Bypass Remote Command Execution

    also in 1 other product

    		9.8
    CriticalCVE-2025-59528

    Flowise has Remote Code Execution vulnerability

    		10.0
    CriticalCVE-2026-56274

    Flowise: OS Command Injection

    also in 1 other product

    		9.9
    CriticalCVE-2026-40933

    Flowise: Authenticated RCE Via MCP Adapters

    also in 1 other product

    		9.9
    CriticalCVE-2025-58434

    Flowise: Missing Authentication for Critical Function

    		9.8
    CriticalCVE-2026-30821

    Flowise: Arbitrary File Upload via MIME Spoofing

    also in 1 other product

    		9.8
    CriticalCVE-2025-8943

    Flowise: Remote Code Execution

    		9.8
    CriticalCVE-2026-41276

    Flowise: AccountService resetPassword Authentication Bypass Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2025-61913

    Flowise is vulnerable to arbitrary file read, arbitrary file write

    		10.0
    CriticalCVE-2025-26319

    Flowise: Unrestricted File Upload

    also in 1 other product

    		9.8
    CriticalCVE-2025-71334

    Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

    also in 2 other products

    		9.8
    CriticalCVE-2024-8181

    Flowise Authentication Bypass

    		9.8
    CriticalCVE-2025-34267

    Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages

    		9.9
    HighCVE-2026-30822

    Flowise: Mass Assignment in `/api/v1/leads` Endpoint

    also in 1 other product

    		7.7
    HighCVE-2025-50538

    Flowise: Cross-site Scripting

    		8.2
    CriticalCVE-2026-69251

    Flowise RCE via TypeORM DataSource

    also in 2 other products

    		8.8
    HighCVE-2025-61687

    FlowiseAI/Flosise has File Upload vulnerability

    		8.3
    CriticalCVE-2025-59434

    Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function

    		9.6
    HighCVE-2026-41277

    Flowise: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		8.8
    HighCVE-2024-31621

    Flowise: Code Execution

    		7.6
    HighCVE-2026-41266

    Flowise: Sensitive Data Leak in public-chatbotConfig

    also in 1 other product

    		7.5
    HighCVE-2024-8182

    Flowise Denial of Service

    		7.5
    HighCVE-2025-59527

    FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

    		7.5

    All vulnerabilities in search

    News

    All products by FlowiseAI