CVE-2026-46478: Flowise mass assignment in DatasetRow allows cross-workspace takeover

Executive brief

FlowiseAI, an open-source tool for building LLM applications, contains a vulnerability that allows users to move data between different organizational workspaces. An authenticated user can exploit this to take control of data rows belonging to other workspaces or inject their own data into a target workspace. This bypasses intended security boundaries and could lead to unauthorized data access or manipulation of training and evaluation records.

Technical details

A mass-assignment vulnerability exists in `packages/server/src/services/dataset/index.ts` due to the use of `Object.assign()` on the `DatasetRow` entity without an explicit field allowlist. By including a `workspaceId` or `datasetId` in the JSON body of a create or update request, an authenticated attacker can overwrite these internal fields. This allows for cross-workspace data takeover (IDOR), where a row can be moved from one workspace to another by specifying a target workspace UUID. The vulnerability is patched in version 3.1.2 by implementing a strict field allowlist.

Affected products

• FlowiseAI flowise <= 3.1.1

Timeline

• 2026-05-14: disclosed
• 2026-05-14: advisory
• 2026-05-14: patched: Fixed in version 3.1.2

References

• https://api.github.com/users/offset
• https://github.com/offset
• https://api.github.com/users/offset/gists%7B/gist_id%7D
• https://api.github.com/users/offset/repos
• https://avatars.githubusercontent.com/u/114768995?v=4
• https://api.github.com/users/offset/events%7B/privacy%7D