# CVE-2026-30822: Flowise mass assignment in /api/v1/leads endpoint

Source: https://junglewise.ai/threats/cve-2026-30822-flowise-mass-assignment-in-api-v1-leads-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-06. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-30822 · Severity: low · CVSS 3 · Published 2026-03-06

Flowise is a visual workflow platform for building chatbots and AI applications. The lead management API endpoint allows unauthenticated attackers to inject arbitrary values into automatically-generated database fields (record ID, creation timestamp, and chat identifier) through a mass assignment vulnerability. This could enable attackers to create records with spoofed identities, manipulate audit trails, or cause data integrity issues.

Technologies: [flowise (npm)](https://junglewise.ai/threats/technologies/flowise). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2026-30822 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-30822 being exploited in the wild.

**How severe is CVE-2026-30822?** Low severity, with a CVSS score of 3, published 6 March 2026.

**Which products and versions are affected?** flowise (npm) SEMVER:introduced=0,fixed=3.0.13.

**Is there a fix for CVE-2026-30822?** Yes. flowise (npm): upgrade to 3.0.13 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-30822 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-30822?** Check whether you run flowise (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- flowise (npm): upgrade to 3.0.13 or later

  ```sh
  npm install flowise@3.0.13
  ```


## Technical details

A mass assignment vulnerability exists in the POST /api/v1/leads endpoint (CWE-915), where the service uses Object.assign() to copy all properties from user-supplied request body directly into the Lead entity without input validation or field filtering. The vulnerable code at /packages/server/src/services/leads/index.ts lines 27–28 overwrites TypeORM auto-generated fields (@PrimaryGeneratedColumn, @CreateDateColumn) before persistence, allowing attackers to supply custom id, createdDate, and chatId values. The endpoint is whitelisted for unauthenticated access in the WHITELIST_URLS constant. An attacker can craft a POST request with malicious field values and bypass server-side field generation, affecting data integrity and audit logging. The vulnerability was patched in version 3.0.13; versions ≤3.0.12 are affected.

## Affected products

- Flowise Flowise ≤3.0.12

## Identifiers

- CVE-2026-30822
- GHSA-mq4r-h2gh-qv7x

## Timeline

- 2026-03-06: disclosed
- 2026-03-06: patched: Version 3.0.13 released

## References

- [https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-mq4r-h2gh-qv7x](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-mq4r-h2gh-qv7x)

## Related threats

- [Duplicate Advisory: INVITED users auto-promoted via SSO email match (invite-token bypass)](https://junglewise.ai/threats/duplicate-advisory-invited-users-auto-promoted-via-sso-email-match-d290aa10)
- [Duplicate Advisory: Flowise contains an unauthenticated sandbox escape](https://junglewise.ai/threats/duplicate-advisory-flowise-contains-an-unauthenticated-sandbox-escape-8959e167)
- [Flowise incomplete credential redaction in API](https://junglewise.ai/threats/cve-2026-73604-flowise-incomplete-credential-redaction-in-api)
- [Flowise text-to-speech endpoint credential abuse via unauthenticated access](https://junglewise.ai/threats/cve-2026-73603-flowise-text-to-speech-endpoint-credential-abuse-via)
- [Flowise IDOR in payment source endpoint](https://junglewise.ai/threats/cve-2026-73488-flowise-idor-in-payment-source-endpoint)