npm

flowise

100 Total advisories

100 Vulnerabilities

0 Malware

Dependency scanning

Check whether flowise is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

flowise

Vulnerabilities

Flowise OverrideConfig security vulnerability

Duplicate Advisory: Flowise OverrideConfig security vulnerability

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint

Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials

Flowise: Incomplete Credential Redaction Exposes Secrets via API

Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

Flowise: Missing Authorization on Execution Update Endpoint

Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation

Flowise: Cross-Workspace OAuth2 Credential Metadata Leak

Flowise: Remote Code Execution Vulnerability in CSVAgent

Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys

Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

Flowise RCE via SQLite Record Manager Node

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

Flowise Sandbox Escape to RCE

Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

Flowise RCE via TypeORM DataSource

Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

Flowise has an Arbitrary File Read

Flowise: Weak Default Token Hash Secret

Flowise has Insufficient Password Salt Rounds

Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows

Flowise: Weak Default JWT Secrets

Flowise: Path Traversal in Vector Store basePath

Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password Endpoint

Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage

Flowise: Weak Default Express Session Secret

Flowise has an MCP Security Bypass that Enables RCE

Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification

Flowise Execute Flow function has an SSRF vulnerability

Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel

Flowise vulnerable to XSS

Flowise Pre-auth Arbitrary File Upload

Flowise has unsandboxed remote code execution via Custom MCP

Flowise allows arbitrary file write to RCE

Flowise Stored XSS vulnerability through logs in chatbot

Flowise has arbitrary file access due to missing chat flow id validation

Flowise Fails to Invalidate Existing Sessions After Password Changes

Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register)

FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover

FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

FlowiseDB vulnerable to SQL Injection by authenticated users

Flowise: Unauthenticated Information Disclosure of OAuth Secrets (Cleartext) via GET Request

FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover

FlowiseAI: Vector Store No Permission Checks

FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment

FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment

FlowiseAI Exposes Basic Auth Credentials via API

FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment

FlowiseAI Vulnerable to Credential Data Leak

FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment

Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

Flowise: Bcrypt Password Hash Exposure

Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

Flowise: Password Reset Link Sent Over Unsecured HTTP

Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

Flowise: File Upload Validation Bypass in createAttachment

Flowise: resetPassword Authentication Bypass Vulnerability

Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`.

Flowise: Parameter Override Bypass Remote Command Execution

Flowise: Code Injection in CSVAgent leads to Authenticated RCE

Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise

Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains