Is CVE-2026-100608 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-100608 being exploited in the wild.

How severe is CVE-2026-100608?

High severity, with a CVSS score of 8.3, published 26 September 2026.

Is there a fix for CVE-2026-100608?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-100608 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-100608?

Check whether you run Flowise at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-100608: Flowise authorization bypass in BullMQ admin dashboard

CVE-2026-100608 · Severity: high · CVSS 8.3 · Published 2026-09-26

Flowise, an AI workflow and chatbot platform, fails to enforce proper access control on its job queue dashboard when run in queue mode. Any authenticated user—even with minimal permissions—can view sensitive data from other tenants including chat messages, credentials, source code, and system prompts, and can perform destructive actions like deleting or retrying jobs across the entire platform.

Technologies: Flowise. Vendors: Flowise.

Quick answers

Is CVE-2026-100608 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-100608 being exploited in the wild.
How severe is CVE-2026-100608?: High severity, with a CVSS score of 8.3, published 26 September 2026.
Which products and versions are affected?: Flowise through 3.1.4.
Is there a fix for CVE-2026-100608?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-100608 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-100608?: Check whether you run Flowise at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The /admin/queues endpoint uses only JWT authentication via verifyTokenForBullMQDashboard middleware but performs no role, permission, or workspace/organization scoping checks. Any authenticated user gains access to the full Bull-Board UI and all queued job payloads across all instances, including incomingInput, credential IDs, chatflow.flowData with custom JavaScript code, and originating tenant identifiers. The endpoint lies outside the /api/v1/* protected tree and write actions (retry, remove, promote, clean) are cross-tenant enabled.

Affected products

Flowise Flowise through 3.1.4

Timeline

2026-09-26: disclosed
2026-01-08: other: Incomplete fix added authentication but not authorization (commit 1bfa7a1c)

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.