CVE-2026-52098: Flowise remote code execution via prediction endpoint

Executive brief

Flowise is a visual AI agent builder that allows users to create and deploy AI workflows. An unauthenticated remote attacker can execute arbitrary code on the server by sending a crafted request to the prediction API endpoint, leading to complete system compromise and potential data theft or service disruption.

Technical details

This vulnerability is an unauthenticated remote code execution (RCE) flaw in Flowise 3.1.2 affecting the /api/v1/prediction/<flowId> endpoint. The endpoint is included in the application's whitelist of URLs that bypass authentication, making it publicly accessible. An attacker can exploit this by sending a malicious payload to execute arbitrary code on the server. The root cause appears to be insufficient input validation or unsafe code execution within the prediction endpoint handler. No patch information is currently available; the project was archived on August 13, 2026.

Affected products

• FlowiseAI Flowise 3.1.2

Timeline

• 2026-09-10: disclosed
• 2026-08-13: other: Project archived on GitHub, no longer actively maintained

References

• https://github.com/FlowiseAI/Flowise
• https://github.com/FlowiseAI/Flowise/blob/main/packages/server/src/utils/constants.ts