References https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jv9m-vf54-chjj https://nvd.nist.gov/vuln/detail/CVE-2025-61913 https://adg.csdn.net/69524b835b9f5f31781b68fd.html https://zhuanlan.zhihu.com/p/1888633779427443826 https://cloud.tencent.com/developer/article/2579672 https://avd.aliyun.com/detail?id=AVD-2025-26319 https://cloud.tencent.com/developer/article/2530529 https://medium.com/@attias.dor/the-burn-notice-part-2-5-5-flowise-pre-auth-arbitrary-file-upload-cve-2025-26319-0d4194a34183 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf https://www.sentinelone.com/vulnerability-database/cve-2025-61913/
Related VulnerabilitiesPoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API ExposureFlowise /api/v1/loginmethod 未授权访问漏洞(CVE-2026-56270)PoCCVE-2026-56270: Flowise <= 3.0.13 - Unauthenticated OAuth Configuration DisclosurePoCCVE-2025-71324: Flowise - Path TraversalPoCCVE-2026-69251: Flowise < 3.1.3 - Remote Code ExecutionFlowise /api/v1/chatflows 文件上传漏洞(CVE-2025-71334)PoCCVE-2025-71334: Flowise - Path TraversalPoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCEFlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞(CVE-2026-46442)PoCCVE-2024-36420: Flowise 1.4.3 - Arbitrary File ReadFlowise 任意文件读取漏洞(CVE-2024-36420)PoCCVE-2026-30824: Flowise - NVIDIA NIM Endpoints Missing AuthenticationPoCCVE-2025-59528: Flowise - Remote Code Execution