Executive brief
Flowise is a visual workflow platform for building chatbots and AI applications. The lead management API endpoint allows unauthenticated attackers to inject arbitrary values into automatically-generated database fields (record ID, creation timestamp, and chat identifier) through a mass assignment vulnerability. This could enable attackers to create records with spoofed identities, manipulate audit trails, or cause data integrity issues.
Technical details
A mass assignment vulnerability exists in the POST /api/v1/leads endpoint (CWE-915), where the service uses Object.assign() to copy all properties from user-supplied request body directly into the Lead entity without input validation or field filtering. The vulnerable code at /packages/server/src/services/leads/index.ts lines 27–28 overwrites TypeORM auto-generated fields (@PrimaryGeneratedColumn, @CreateDateColumn) before persistence, allowing attackers to supply custom id, createdDate, and chatId values. The endpoint is whitelisted for unauthenticated access in the WHITELIST_URLS constant. An attacker can craft a POST request with malicious field values and bypass server-side field generation, affecting data integrity and audit logging. The vulnerability was patched in version 3.0.13; versions ≤3.0.12 are affected.
Affected products
- Flowise Flowise ≤3.0.12
Timeline
- 2026-03-06: disclosed
- 2026-03-06: patched: Version 3.0.13 released