Executive brief
Flowise, an open-source low-code platform for building AI applications, contains a SQL injection vulnerability in its database handling code. An authenticated attacker can inject malicious SQL through the tableName parameter to read, modify, or delete sensitive data from the connected database.
Technical details
Flowise versions up to 2.2.3 are vulnerable to SQL injection (CWE-89) via the tableName parameter in the Postgres_VectorStores component. The vulnerability exists because user-supplied table names are not properly sanitized before being used in SQL queries. An attacker with valid authentication credentials can craft a malicious tableName parameter to execute arbitrary SQL commands, achieving confidentiality (reading data), integrity (modifying data), and availability impacts. The vulnerability was fixed in version 2.2.4 through proper input sanitization of the tableName parameter.
Affected products
- FlowiseAI Flowise <= 2.2.3
Timeline
- 2025-04-09: disclosed
- 2025-04-10: patched: Fixed in version 2.2.4