Executive brief
Flowise is a low-code platform for building AI and large language model applications with a web-based interface and REST API. A flaw in the password reset mechanism allows attackers to reset any user's password without authorization by submitting a null or empty token value, potentially compromising account security and enabling unauthorized access to the platform and its integrated AI systems.
Technical details
The resetPassword() method in the AccountService class fails to verify that a password reset token was actually generated before validating it. By default, the reset token field is null or empty, which matches a null/empty token submitted by an attacker. The vulnerability exists in the /api/v1/account/reset-password endpoint and requires only knowledge of a target user's email address and no prior authentication. An attacker can exploit this within 15 minutes of account creation (or per the PASSWORD_RESET_TOKEN_EXPIRY_IN_MINUTES setting) to change the target user's password and gain full account access. Flowise version 3.0.13 and earlier are affected; patch is available in version 3.1.0 or later.
Affected products
- FlowiseAI Flowise <= 3.0.13
Timeline
- 2026-04-16: disclosed
- 2026: patched: Fixed in version 3.1.0