CVE-2026-69252: Flowise missing authorization in files API endpoint

Executive brief

Flowise, an open-source tool for building LLM applications, contains a security flaw that allows users within the same organization to access or delete files belonging to other workspaces. Even if a user has very limited permissions, they can use their API key to list and permanently delete files they should not be able to see. This could lead to the loss of important training data or configuration files and compromises the privacy of different teams working within the same organization.

Technical details

A missing authorization vulnerability (CWE-862) exists in the `/api/v1/files` endpoint of Flowise. The route is only protected by a feature gate (`feat:files`) and lacks proper permission middleware to enforce workspace isolation. The `getAllFiles` function lists all files under an organization's root storage, while the `deleteFile` function uses a user-controlled path without verifying if the file belongs to the user's active workspace. An attacker with a low-privileged API key can exploit this to perform cross-workspace file listing and deletion. The issue is fixed in version 3.1.3.

Affected products

• FlowiseAI flowise <= 3.1.2

Timeline

• 2026-07-29: disclosed
• 2026-08-04: advisory
• 2026-08-04: patched: Fixed in version 3.1.3

References

• https://api.github.com/users/360AlphaLab
• https://github.com/360AlphaLab
• https://api.github.com/users/360AlphaLab/gists%7B/gist_id%7D
• https://api.github.com/users/360AlphaLab/repos
• https://avatars.githubusercontent.com/u/89183311?v=4
• https://api.github.com/users/360AlphaLab/events%7B/privacy%7D