Junglewise Threat Intelligence

CVE-2025-61687: FlowiseAI Flowise arbitrary file upload leading to RCE

CVE-2025-61687 · Severity: low · CVSS 3.1 · Published 2025-10-08

Technologies: flowise (npm), FlowiseAI Flowise. Vendors: npm, FlowiseAI.

Executive brief

Flowise is a visual AI agent builder that allows users to upload files for processing. The application fails to validate file extensions, MIME types, or content during uploads, permitting authenticated attackers to upload malicious JavaScript files that can execute arbitrary commands on the server. While the uploaded files do not execute automatically, their persistent storage creates a foothold for remote code execution when combined with other vulnerabilities or misconfigurations.

Technical details

The vulnerability is an unrestricted file upload (CWE-434) in the Flowise attachment handling system. The vulnerable component is the file upload route and service layer (packages/server/src/routes/attachments/index.ts and packages/components/src/storageUtils.ts), which accepts file uploads via Multer without validating file extensions, MIME types, or content. Authenticated users can upload Node.js web shells to arbitrary storage paths using the POST /api/v1/attachments/{chatflowId}/{chatId} endpoint. The system only sanitizes dangerous characters in filenames but does not reject malicious file types. Uploaded files are persisted to the server filesystem and can be triggered for execution if an administrator unknowingly accesses them or if additional vulnerabilities enable code execution. The vulnerability requires valid authentication but no elevated privileges.

Affected products

  • FlowiseAI Flowise 3.0.7

Timeline

  • 2025-10-06: disclosed: CVE-2025-61687 published on NVD
  • 2025-10-08: advisory: GHSA-35g6-rrw3-v6xc published on GitHub
  • 2025-10-08: patched: Patched in Flowise 3.0.8

References

Related threats