Flowise Vulnerabilities

npmAI Agents

AI Threat Alert tracks 180 known vulnerabilities in Flowise, 37 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

180
Total CVEs
37
Critical
npm
Ecosystem
Oct 30, 2026
Last CVE
46%
Patch Rate
4d
Avg Time to Patch

Known Vulnerabilities(180 total, page 6 of 8)

SeverityCVE IDSummaryCVSSPublished
HIGHCVE-2026-41275Flowise: HTTP password reset link allows MITM takeover7.5Apr 23, 2026HIGHCVE-2026-41273Flowise: auth bypass exposes OAuth 2.0 tokens8.2Apr 23, 2026HIGHCVE-2026-41272Flowise: SSRF bypass via DNS rebinding exposes internal networks7.1Apr 23, 2026HIGHCVE-2026-41271Flowise: SSRF via prompt template injection in API Chain8.3Apr 23, 2026HIGHCVE-2026-41270Flowise: SSRF bypass exposes cloud metadata services8.3Apr 23, 2026HIGHCVE-2026-41269Flowise: unrestricted file upload enables persistent RCE8.8Apr 23, 2026CRITICALCVE-2026-41268Flowise: unauthenticated RCE via NODE_OPTIONS env injection9.8Apr 23, 2026CRITICALCVE-2026-41267Flowise: mass assignment auth bypass in registration9.8Apr 23, 2026HIGHCVE-2026-41266Flowise: unauthenticated API key exposure via chatbot config7.5Apr 23, 2026CRITICALCVE-2026-41265Flowise: RCE via prompt injection in Airtable Agent9.8Apr 23, 2026HIGHCVE-2026-41138Flowise: RCE via unsanitized input in AirtableAgent8.8Apr 23, 2026HIGHCVE-2026-41137Flowise: RCE via CSVAgent unsanitized code injection8.8Apr 23, 2026CRITICALCVE-2026-41264Flowise: prompt injection → unsandboxed RCE via CSV Agent9.8Apr 21, 2026CRITICALGHSA-v38x-c887-992fFlowise: prompt injection bypasses Python sandbox RCE--Apr 18, 2026HIGHGHSA-3prp-9gf7-4rxxFlowise: Mass assignment enables cross-tenant store takeover--Apr 17, 2026HIGHGHSA-w47f-j8rh-wx87Flowise: credential exposure via public chatflow API--Apr 17, 2026HIGHGHSA-5fw2-mwhh-9947Flowise: unauth TTS endpoint exposes stored AI API keys--Apr 17, 2026CRITICALCVE-2026-40933Flowise: RCE via MCP stdio command injection9.9Apr 16, 2026MEDIUMGHSA-6pcv-j4jx-m4vxFlowise: unauthenticated SSO config exposes OAuth secrets5.3Apr 16, 2026MEDIUMGHSA-cc4f-hjpj-g9p8Flowise: hardcoded JWT defaults enable full auth bypass5.6Apr 16, 2026MEDIUMGHSA-2qqc-p94c-hxwhFlowise: hardcoded session secret enables auth bypass5.6Apr 16, 2026MEDIUMGHSA-m7mq-85xj-9x33Flowise: hardcoded default key enables JWT token forgery5.6Apr 16, 2026MEDIUMGHSA-w6v6-49gh-mc9wFlowise: path traversal allows arbitrary file write via vector store--Apr 16, 2026MEDIUMGHSA-qqvm-66q4-vf5cFlowise: SSRF bypass enables cloud credential theft--Apr 16, 2026MEDIUMGHSA-9hrv-gvrv-6gf2Flowise: SSRF bypass enables cloud metadata access--Apr 16, 2026

Showing 126–150 of 180

Frequently asked questions

What is Flowise?

Flowise is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does Flowise have?

Flowise has 180 known CVEs, 37 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Flowise distributed in?

Flowise is distributed via the npm ecosystem and categorized as ai agents.

Where does the Flowise vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Flowise?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Flowise in your stack

Get instant alerts when new vulnerabilities affect Flowise. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring