Executive brief
Flowise, an open-source tool for building LLM applications, contains a security flaw where it uses easily guessable default passwords for its internal security tokens. If an administrator does not manually change these settings during installation, an attacker can bypass the login screen entirely. This allows unauthorized individuals to gain full administrative control over the system, potentially exposing sensitive AI workflows and data.
Technical details
Flowise (versions 3.0.13 and earlier) contains a hardcoded cryptographic key vulnerability (CWE-321) within its enterprise passport authentication middleware. The application uses static strings ('auth_token', 'refresh_token', 'AUDIENCE', 'ISSUER') as fallbacks when specific environment variables are not defined. Because these defaults are publicly known, a remote, unauthenticated attacker can forge JSON Web Tokens (JWTs) to impersonate any user, including administrators. This results in a complete authentication bypass. The issue is resolved in version 3.1.0 by removing these defaults and requiring explicit configuration.
Affected products
- FlowiseAI Flowise <= 3.0.13
Timeline
- 2026-04-15: advisory: GitHub Security Advisory published
- 2026-07-12: disclosed: NVD publication date