Flowise Vulnerabilities

npmAI Agents

AI Threat Alert tracks 180 known vulnerabilities in Flowise, 37 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

180
Total CVEs
37
Critical
npm
Ecosystem
Oct 30, 2026
Last CVE
46%
Patch Rate
4d
Avg Time to Patch

Known Vulnerabilities(180 total, page 1 of 8)

SeverityCVE IDSummaryCVSSPublished
HIGHCVE-2026-119978Flowise: sandbox escape allows authenticated RCE8.5Oct 30, 2026HIGHCVE-2026-100610Flowise: missing authz in upsert-history exposes configs7.5Sep 26, 2026HIGHCVE-2026-100608Flowise: BullMQ dashboard authz gap exposes all tenants8.3Sep 26, 2026HIGHCVE-2026-100607Flowise: SSO email-only matching enables account takeover7.7Sep 26, 2026HIGHCVE-2026-100606Flowise: SSO auth bypass hijacks pending invitations7.7Sep 26, 2026HIGHCVE-2026-100605Flowise: missing RBAC on chat routes exposes chat history7.1Sep 26, 2026HIGHCVE-2026-91938Flowise: SSRF in web loaders exposes cloud metadata7.1Sep 15, 2026HIGHCVE-2026-91937Flowise: NoSQL injection exposes other users' chat history7.5Sep 15, 2026MEDIUMCVE-2026-91936Flowise: CI script injection leaks AWS and Docker creds6.8Sep 15, 2026HIGHCVE-2026-91935Flowise: SSRF in chat-model baseURL leaks API keys8.3Sep 15, 2026HIGHCVE-2026-91934Flowise: path traversal in SQL chain enables RCE8.8Sep 15, 2026HIGHCVE-2026-91933Flowise: cross-workspace tool access via realtime auth gap7.1Sep 15, 2026HIGHCVE-2026-91932Flowise: MCP cwd validation bypass enables RCE8.5Sep 15, 2026HIGHCVE-2026-91931Flowise: RCE via npx in Custom MCP node8.5Sep 15, 2026HIGHCVE-2026-91930Flowise: cross-tenant org admin takeover via IDOR7.5Sep 15, 2026HIGHCVE-2026-91929Flowise: cross-tenant authorization gaps in Enterprise APIs7.1Sep 15, 2026MEDIUMCVE-2026-90580Flowise: SSRF via Host/X-Forwarded-Proto in Evaluations6.3Sep 13, 2026HIGHCVE-2026-90535Flowise: IDOR in abort API enables agent DoS7.5Sep 12, 2026MEDIUMCVE-2026-90534Flowise: IDOR leaks cross-workspace credentials6.5Sep 12, 2026MEDIUMCVE-2026-90533Flowise: IDOR exposes org owner's password hash6.5Sep 12, 2026CRITICALCVE-2026-52098Flowise: unauthenticated RCE via prediction API endpoint9.8Sep 10, 2026MEDIUMCVE-2026-73604Flowise: API leaks decrypted credentials in plaintext6.5Aug 13, 2026MEDIUMCVE-2026-73603Flowise: unauth TTS endpoint drains stored API keys--Aug 13, 2026CRITICALCVE-2026-73487Flowise: Python sandbox bypass enables unauth RCE--Aug 13, 2026UNKNOWNCVE-2026-73486Flowise: CSV Agent code injection enables RCE--Aug 13, 2026

Showing 1–25 of 180

Frequently asked questions

What is Flowise?

Flowise is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does Flowise have?

Flowise has 180 known CVEs, 37 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Flowise distributed in?

Flowise is distributed via the npm ecosystem and categorized as ai agents.

Where does the Flowise vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Flowise?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Flowise in your stack

Get instant alerts when new vulnerabilities affect Flowise. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring