Flowise Vulnerabilities

npmAI Agents

AI Threat Alert tracks 180 known vulnerabilities in Flowise, 37 rated critical — an AI/ML ai agents in the npm ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

180
Total CVEs
37
Critical
npm
Ecosystem
Oct 30, 2026
Last CVE
46%
Patch Rate
4d
Avg Time to Patch

Known Vulnerabilities(180 total, page 7 of 8)

SeverityCVE IDSummaryCVSSPublished
HIGHGHSA-f228-chmx-v6j6Flowise: prompt injection RCE via AirtableAgent8.3Apr 16, 2026CRITICALGHSA-9wc7-mj3f-74xvFlowise CSVAgent: RCE via Python code injection--Apr 16, 2026HIGHGHSA-48m6-ch88-55mjFlowise: Mass Assignment allows cross-tenant org takeover8.1Apr 16, 2026HIGHGHSA-4jpm-cgx2-8h37Flowise: unauth API exposes plaintext API keys and tokens--Apr 16, 2026HIGHGHSA-cvrr-qhgw-2mm6Flowise: unauthenticated RCE via FILE-STORAGE bypass7.7Apr 16, 2026HIGHGHSA-rh7v-6w34-w2rrFlowise: MIME bypass enables persistent Node.js web shell RCE7.1Apr 16, 2026HIGHGHSA-xhmj-rg95-44hvFlowise: SSRF bypass exposes cloud IAM credentials7.1Apr 16, 2026HIGHGHSA-2x8m-83vc-6wv4Flowise: SSRF bypass exposes internal services7.1Apr 16, 2026HIGHGHSA-6r77-hqx7-7vw8FlowiseAI: SSRF via prompt injection in API Chain7.1Apr 16, 2026HIGHGHSA-6f7g-v4pp-r667Flowise: OAuth token theft via unauthenticated endpoint--Apr 16, 2026HIGHGHSA-x5w6-38gp-mrqhFlowise: HTTP reset link exposes tokens to MITM takeover--Apr 16, 2026HIGHGHSA-28g4-38q8-3cwcFlowise: Cypher injection allows full Neo4j DB wipe--Apr 16, 2026HIGHGHSA-f6hc-c5jr-878pFlowise: auth bypass enables account takeover via null token--Apr 16, 2026HIGHCVE-2026-31829Flowise: SSRF via HTTP Node exposes internal network8.8Mar 10, 2026CRITICALCVE-2026-30824Flowise: auth bypass exposes NVIDIA NIM container endpoints9.8Mar 7, 2026UNKNOWNCVE-2026-30823Flowise: IDOR enables account takeover and SSO bypass--Mar 7, 2026UNKNOWNCVE-2026-30822Flowise: mass assignment allows unauthenticated DB injection--Mar 7, 2026CRITICALCVE-2026-30821flowise: Arbitrary File Upload enables RCE9.8Mar 7, 2026HIGHCVE-2026-30820Flowise: header spoof auth bypass exposes admin API & creds8.8Mar 7, 2026CRITICALCVE-2025-61913Flowise: path traversal in file tools leads to RCE9.9Oct 8, 2025HIGHCVE-2025-61687Flowise: unrestricted file upload enables persistent RCE8.8Oct 6, 2025CRITICALCVE-2025-59528Flowise: Unauthenticated RCE via MCP config injection10.0Sep 22, 2025HIGHCVE-2025-59527Flowise: unauthenticated SSRF exposes internal network7.5Sep 22, 2025CRITICALCVE-2025-58434Flowise: auth bypass in reset flow allows full ATO9.8Sep 12, 2025MEDIUMCVE-2024-37146Flowise: reflected XSS enables credential theft6.1Jul 1, 2024

Showing 151–175 of 180

Frequently asked questions

What is Flowise?

Flowise is an AI/ML ai agents tracked by AI Threat Alert for security vulnerabilities in the npm ecosystem.

How many known vulnerabilities does Flowise have?

Flowise has 180 known CVEs, 37 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Flowise distributed in?

Flowise is distributed via the npm ecosystem and categorized as ai agents.

Where does the Flowise vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Flowise?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Flowise in your stack

Get instant alerts when new vulnerabilities affect Flowise. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring