Executive brief
Flowise is a visual interface for building AI workflows using large language models. A CORS (Cross-Origin Resource Sharing) misconfiguration allows any website to make requests to Flowise on behalf of a user, potentially allowing attackers to steal information or read arbitrary files from unprotected Flowise instances. This vulnerability affects all versions up to 1.4.3 with no patches currently available.
Technical details
The vulnerability stems from an improper CORS configuration that sets the Access-Control-Allow-Origin header to "*" (accept all origins) in packages/server/src/index.ts. This allows cross-origin requests from any website without authentication checks. The attack vector is network-based with no authentication required and no user interaction needed. An attacker can exploit this to steal sensitive information from unauthenticated instances, and when chained with path injection vulnerabilities, can read arbitrary files from the Flowise server. As of the advisory publication date (2024-08-05), no patches are available.
Affected products
- FlowiseAI Flowise up to 1.4.3
Timeline
- 2024-08-05: disclosed: Vulnerability published in GitHub advisory database
- 2024-07-01: other: CVE-2024-36421 published on NVD