Flowise Vulnerabilities
37 vulnerabilities related to Flowise
- PoC2026-08-19CVE-2026-56270: Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure
- PoC2026-08-16CVE-2025-71324: Flowise - Path Traversal
- PoC2026-08-16CVE-2026-69251: Flowise < 3.1.3 - Remote Code Execution
- 2026-08-07Flowise /api/v1/chatflows 文件上传漏洞（CVE-2025-71334）
- PoC2026-07-31CVE-2025-71334: Flowise - Path Traversal
- PoC2026-07-31CVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCE
- 2026-07-20FlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞（CVE-2026-46442）
- PoC2026-06-17CVE-2024-36420: Flowise 1.4.3 - Arbitrary File Read
- 2026-06-08Flowise 任意文件读取漏洞(CVE-2024-36420)
- PoC2026-04-16CVE-2026-30824: Flowise - NVIDIA NIM Endpoints Missing Authentication
- PoC2026-04-09CVE-2025-59528: Flowise - Remote Code Execution
- 2026-02-25Flowise /api/v1/fetch-links 服务器端请求伪造漏洞 （CVE-2025-59527）
- 2025-11-21Flowise /api/v1/node-load-method/customMCP 命令执行漏洞（CVE-2025-8943）
- 2025-11-21Flowise /api/v1/node-load-method/customMCP 命令执行漏洞（CVE-2025-8943）
- PoC2025-11-11CVE-2025-8943: Flowise < 3.0.1 - Remote Command Execution
- 2025-10-11FlowiseAI Flowise 权限管理不当漏洞
- 2025-10-11Flowise FlowiseAI 需授权 文件上传限制不当漏洞
- 2025-10-11FlowiseAI Flowise 权限管理不当漏洞
- 2025-09-19Flowise /api/v1/account/forgot-password 未授权访问漏洞（CVE-2025-58434）
- 2025-09-19Flowise /api/v1/openai-assistants-file/download 文件读取漏洞
- 2025-09-19Flowise /api/v1/account/forgot-password 未授权访问漏洞（CVE-2025-58434）
- 2025-09-19Flowise /api/v1/openai-assistants-file/download 文件读取漏洞
- 2025-09-17Flowise 任意文件读取漏洞
- 2025-09-17FlowiseAI/Flosise SSRF漏洞
- 2025-09-17FlowiseAI Flowise 未授权 代码注入漏洞
- 2025-09-16Flowise /api/v1/openai-assistants-file/download 存在路径遍历漏洞
- 2025-09-16FlowiseAI Flowise 未授权 路径遍历漏洞 可导致任意文件写入
- 2025-09-15Flowise Flowise 权限管理不当漏洞
- PoC2025-08-01CVE-2024-31621: Flowise 1.6.5 - Authentication Bypass
- PoC2025-08-01CVE-2024-8181: Flowise <= 1.8.2 Authentication Bypass
- PoC2025-08-01CVE-2025-26319: FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload
- PoC2025-08-01CVE-2025-58434: Flowise <= 3.0.5 - Account Takeover
- PoC2025-08-01CVE-2025-26319: FlowiseAI 未授权任意文件写入漏洞
- PoC2025-08-01flowise-installer: Flowise Installation Wizard - Exposure
- 2025-06-06Flowise /api/v1/apikey 权限绕过漏洞 （CVE-2024-8181）
- 2025-06-06Flowise /api/v1/apikey 权限绕过漏洞 （CVE-2024-8181）
- 2024-04-24Flowise API 存在未授权访问漏洞（CVE-2024-31621）