Flowise Vulnerabilities

npmAI Agents

AI Threat Alert tracks 180 known vulnerabilities in Flowise, 37 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

180
Total CVEs
37
Critical
npm
Ecosystem
Oct 30, 2026
Last CVE
46%
Patch Rate
4d
Avg Time to Patch

Known Vulnerabilities(180 total, page 2 of 8)

SeverityCVE IDSummaryCVSSPublished
CRITICALCVE-2026-73601Flowise: RCE via Custom MCP node env var injection--Aug 13, 2026UNKNOWNCVE-2026-73488Flowise: IDOR exposes cross-tenant billing/PII data--Aug 13, 2026UNKNOWNCVE-2026-73602Flowise: vm2 sandbox escape enables RCE--Aug 13, 2026CRITICALCVE-2026-73483Flowise: sandbox escape via puppeteer.launch() to RCE--Aug 13, 2026UNKNOWNCVE-2026-73484Flowise: Pandas sandbox bypass leaks files, writes to disk--Aug 13, 2026CRITICALCVE-2026-73485Flowise: RCE via Airtable Agent pyodide sandbox bypass--Aug 13, 2026HIGHCVE-2026-71962Flowise: auth bypass leaks private chatflow files7.5Aug 10, 2026HIGHCVE-2026-67620Flowise: SSRF bypass exposes cloud metadata credentials7.7Aug 8, 2026HIGHCVE-2026-70636Flowise: auth bypass triggers unauthorized OAuth refresh7.5Aug 6, 2026CRITICALCVE-2026-67622Flowise: IDOR in Assistants API leaks OpenAI credentials9.9Aug 6, 2026HIGHCVE-2026-67621Flowise: broken authz lets viewers poison RAG stores7.6Aug 6, 2026UNKNOWNCVE-2026-70471Flowise: broken authZ leaks workspace secrets via sandbox--Aug 4, 2026HIGHGHSA-88pr-878c-24wfFlowise: S3 loader path traversal enables file write--Aug 4, 2026HIGHCVE-2026-70472Flowise: broken auth exposes cross-tenant OpenAI keys--Aug 4, 2026UNKNOWNCVE-2026-70473Flowise: broken authz leaks Qdrant config, infra data--Aug 4, 2026MEDIUMGHSA-rwrp-9823-p2xqFlowise: credential API leaks plaintext DB/cloud secrets6.5Aug 4, 2026HIGHCVE-2026-70474Flowise: missing workspace auth in OAuth2 credential routes--Aug 4, 2026UNKNOWNCVE-2026-70475Flowise: missing authz lets users tamper executions--Aug 4, 2026MEDIUMGHSA-8gj2-2cvc-6xx7Flowise: missing auth on TTS drains owner's API budget--Aug 4, 2026UNKNOWNCVE-2026-70476Flowise: billing IDOR lets tenants hijack Stripe subs--Aug 4, 2026UNKNOWNCVE-2026-70477Flowise: prompt injection bypasses sandbox for RCE--Aug 4, 2026CRITICALCVE-2026-70478Flowise: unauth OAuth refresh endpoint leaks access tokens--Aug 4, 2026UNKNOWNCVE-2026-70470Flowise: Unicode homoglyph bypass enables RCE--Aug 4, 2026UNKNOWNCVE-2026-69264Flowise: CSV Agent template injection enables host RCE--Aug 4, 2026UNKNOWNCVE-2026-69263Flowise: env-var bypass reinstates npx auto-exec RCE--Aug 4, 2026

Showing 26–50 of 180

Frequently asked questions

What is Flowise?

Flowise is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does Flowise have?

Flowise has 180 known CVEs, 37 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Flowise distributed in?

Flowise is distributed via the npm ecosystem and categorized as ai agents.

Where does the Flowise vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Flowise?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Flowise in your stack

Get instant alerts when new vulnerabilities affect Flowise. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring