Executive brief
Flowise is an open-source chatbot and workflow orchestration platform. Administrators face credential theft when viewing user messages in the admin panel, as a malicious actor can inject JavaScript code via crafted chat messages. When an admin clicks "View Messages," the injected script executes in the admin's browser context and can steal credentials stored in browser storage, leading to full admin panel compromise.
Technical details
A stored cross-site scripting (XSS) vulnerability exists in Flowise's message display functionality due to lack of input sanitization. An attacker can inject arbitrary JavaScript via an iframe with srcdoc attribute in message input. The vulnerability requires user interaction (admin clicking "View Messages") to execute but no prior authentication or special privileges. The malicious script executes in the admin's browser context with access to localStorage, enabling theft of admin credentials and session tokens. The vulnerability affects versions prior to 2.2.7, with patches available in version 3.0.8.
Affected products
- FlowiseAI Flowise < 2.2.7
Timeline
- 2025-10-03: disclosed: Advisory GHSA-964p-j4gg-mhwc published