# CVE-2025-71338: Flowise path traversal and arbitrary file write in document-store API

Source: https://junglewise.ai/threats/cve-2025-71338-flowise-path-traversal-and-arbitrary-file-write-in-document-store  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-25. Updated: 2026-06-25  
License: CC BY 4.0 with a link back

CVE-2025-71338 · Severity: critical · CVSS 10 · Published 2026-06-25

Flowise, an open-source tool for building LLM applications, contains a critical flaw that allows unauthorized users to write files to the server's filesystem. By sending a specially crafted request, an attacker can overwrite essential system files, such as configuration or package files. This can lead to a complete takeover of the server, allowing the attacker to execute malicious commands or steal sensitive data when the application restarts.

Technologies: [flowise (npm)](https://junglewise.ai/threats/technologies/flowise). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2025-71338 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-71338 being exploited in the wild.

**How severe is CVE-2025-71338?** Critical severity, with a CVSS score of 10, published 25 June 2026.

**Which products and versions are affected?** flowise (npm) <= 2.2.7, SEMVER:introduced=0,last_affected=2.2.7.

**Is there a fix for CVE-2025-71338?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-71338 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-71338?** Check whether you run flowise (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability exists in the `/api/v1/document-store/loader/process` endpoint of Flowise. The root cause is the lack of sanitization of the `fileName` parameter within the `storageUtils.ts` component, specifically in functions like `addBase64FilesToStorage`. An unauthenticated attacker can use `../` sequences in the `txtFile` parameter to escape the intended directory and overwrite arbitrary files on the host. A demonstrated exploit involves overwriting `package.json` to modify the application's start scripts, resulting in Remote Code Execution (RCE) when the service is restarted. As of the advisory date, no patched version is specified, though the vulnerability is confirmed in version 1.8.2.

## Affected products

- FlowiseAI Flowise <= 1.8.2

## Identifiers

- CVE-2025-71338
- GHSA-8vvx-qvq9-5948

## Timeline

- 2025-03-14: advisory: GitHub Security Advisory published
- 2026-06-25: disclosed: NVD publication date

## References

- [https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8vvx-qvq9-5948](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8vvx-qvq9-5948)
- [https://www.vulncheck.com/advisories/flowise-arbitrary-file-write-to-remote-code-execution-via-document-store-api](https://www.vulncheck.com/advisories/flowise-arbitrary-file-write-to-remote-code-execution-via-document-store-api)

## Related threats

- [Duplicate Advisory: INVITED users auto-promoted via SSO email match (invite-token bypass)](https://junglewise.ai/threats/duplicate-advisory-invited-users-auto-promoted-via-sso-email-match-d290aa10)
- [Duplicate Advisory: Flowise contains an unauthenticated sandbox escape](https://junglewise.ai/threats/duplicate-advisory-flowise-contains-an-unauthenticated-sandbox-escape-8959e167)
- [Flowise incomplete credential redaction in API](https://junglewise.ai/threats/cve-2026-73604-flowise-incomplete-credential-redaction-in-api)
- [Flowise text-to-speech endpoint credential abuse via unauthenticated access](https://junglewise.ai/threats/cve-2026-73603-flowise-text-to-speech-endpoint-credential-abuse-via)
- [Flowise IDOR in payment source endpoint](https://junglewise.ai/threats/cve-2026-73488-flowise-idor-in-payment-source-endpoint)