Executive brief
Flowise, an open-source tool for building LLM applications, contains a security flaw that allows anyone to create a new administrative account without permission. By exploiting an unprotected registration page, an unauthorized person can gain full access to the system's data and management features. This could lead to the theft of sensitive AI configurations, API keys, and internal data.
Technical details
An authentication bypass vulnerability exists in Flowise (specifically version 3.0.1 and earlier) due to missing authentication for a critical function (CWE-306). The '/api/v1/account/register' endpoint remains accessible even after the initial organization setup is complete. A remote, unauthenticated attacker can send a crafted JSON request to this endpoint to register a new user account with 'pro' type privileges. Once registered, the attacker can authenticate to the system and gain full access to the Flowise API and dashboard without needing existing credentials. As of the advisory date, no official patch was specified, though the vulnerability is confirmed in on-premise deployments.
Affected products
- FlowiseAI Flowise <= 3.0.1
Timeline
- 2025-11-15: advisory: Initial GitHub Security Advisory published
- 2026-06-25: disclosed: NVD and VulnCheck published CVE details