Executive brief
Flowise, an open-source tool for building LLM applications, contains a vulnerability where a specific interface returns the entire server's history to any logged-in user. This allows an attacker to view sensitive configuration details and infrastructure information belonging to other users or organizations. Such exposure could lead to targeted attacks on a company's data storage or cause service performance issues due to the massive size of the data being transferred.
Technical details
An information disclosure vulnerability exists in Flowise due to missing authorization and data scoping in the 'GET /api/v1/upsert-history' endpoint. The root cause is a failure to restrict query results to the requesting user's tenant or workspace, causing the server to return the entire global upsert history. A remote attacker with low privileges (authenticated user) can exploit this by sending a simple GET request to the affected endpoint. The resulting response can exceed 100MB and contains sensitive infrastructure details, including Vector Store URLs, collection names, and integration parameters. This issue is patched in version 3.1.3.
Affected products
- FlowiseAI flowise <= 3.1.2
Timeline
- 2026-07-29: disclosed: Initial disclosure to vendor
- 2026-08-04: advisory: GitHub Advisory published
- 2026-08-04: patched: Version 3.1.3 released