# Flowise vulnerabilities Source: https://junglewise.ai/threats/vendors/flowise Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/flowise.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 18 vulnerabilities in Flowise: 0 in the last 7 days and 5 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-100608, was published on 26 September 2026. Nothing in the last four weeks, down from 4 vulnerabilities in the four before. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 5 - All time: 18 (3 critical, 0 exploited in the wild) ## About Flowise Low-code platform for building and deploying conversational AI applications and chatbot flows. ## Latest Flowise vulnerabilities - [CVE-2026-100608: Flowise authorization bypass in BullMQ admin dashboard](https://junglewise.ai/threats/cve-2026-100608-flowise-through-3-1-4-does-not-enforce-authorization-on-the) (high, CVSS 8.3, published 26 Sep 2026) - [CVE-2026-91931: Flowise Custom MCP remote code execution via npx](https://junglewise.ai/threats/cve-2026-91931-flowise-custom-mcp-remote-code-execution-via-npx) (high, CVSS 8.5, published 15 Sep 2026) - [CVE-2026-91930: Flowise cross-tenant organization admin takeover via unscoped membership APIs](https://junglewise.ai/threats/cve-2026-91930-flowise-cross-tenant-organization-admin-takeover-via-unscoped) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-91929: Flowise cross-tenant authorization bypass in Enterprise endpoints](https://junglewise.ai/threats/cve-2026-91929-flowise-cross-tenant-authorization-bypass-in-enterprise-endpoints) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-90533: Flowise broken access control in GET /api/v1/organizationuser](https://junglewise.ai/threats/cve-2026-90533-flowise-broken-access-control-in-get-api-v1-organizationuser) (medium, CVSS 6.5, published 12 Sep 2026) - [CVE-2026-73603: Flowise text-to-speech endpoint credential abuse via unauthenticated access](https://junglewise.ai/threats/cve-2026-73603-flowise-text-to-speech-endpoint-credential-abuse-via) (medium, CVSS 5.3, published 13 Aug 2026) - [CVE-2026-73486: Flowise CSV Agent code injection via customReadCSV](https://junglewise.ai/threats/cve-2026-73486-flowise-csv-agent-code-injection-via-customreadcsv) (high, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-73485: Flowise Airtable Agent code injection in pyodide](https://junglewise.ai/threats/cve-2026-73485-flowise-airtable-agent-code-injection-in-pyodide) (high, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-73483: Flowise sandbox escape via puppeteer in NodeVM](https://junglewise.ai/threats/cve-2026-73483-flowise-sandbox-escape-via-puppeteer-in-nodevm) (critical, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-67620: Flowise server-side request forgery in metadata service guard](https://junglewise.ai/threats/cve-2026-67620-flowise-server-side-request-forgery-in-metadata-service-guard) (high, CVSS 7.7, published 8 Aug 2026) - [CVE-2026-67621: Flowise missing authorization in document store operations](https://junglewise.ai/threats/cve-2026-67621-flowise-missing-authorization-in-document-store-operations) (high, CVSS 7.6, published 6 Aug 2026) - [Flowise Execute Flow SSRF in base URL configuration](https://junglewise.ai/threats/flowise-execute-flow-ssrf-in-base-url-configuration-fac4f0c1) (low, CVSS 3.1, published 23 Jun 2026) - [CVE-2026-41268: Flowise: Parameter Override Bypass Remote Command Execution](https://junglewise.ai/threats/cve-2026-41268-flowise-parameter-override-bypass-remote-command-execution) (critical, CVSS 9.8, published 23 Apr 2026) - [CVE-2026-41137: Flowise: Code Injection in CSVAgent leads to Authenticated RCE](https://junglewise.ai/threats/cve-2026-41137-flowise-code-injection-in-csvagent-leads-to-authenticated-rce) (high, CVSS 8.8, published 23 Apr 2026) - [CVE-2026-30822: Flowise mass assignment in /api/v1/leads endpoint](https://junglewise.ai/threats/cve-2026-30822-flowise-mass-assignment-in-api-v1-leads-endpoint) (low, CVSS 3, published 6 Mar 2026) - [Flowise ReadFileTool arbitrary file read](https://junglewise.ai/threats/flowise-readfiletool-arbitrary-file-read-d9b723ac) (low, CVSS 3.1, published 10 Oct 2025) - [CVE-2025-61913: Flowise WriteFileTool arbitrary file write vulnerability](https://junglewise.ai/threats/cve-2025-61913-flowise-writefiletool-arbitrary-file-write-vulnerability) (critical, CVSS 9.9, published 8 Oct 2025) - [CVE-2024-8182: Flowise unauthenticated denial of service in file upload endpoint](https://junglewise.ai/threats/cve-2024-8182-flowise-unauthenticated-denial-of-service-in-file-upload-endpoint) (low, CVSS 3.1, published 27 Aug 2024) ## Most severe Flowise vulnerabilities - [CVE-2025-61913: Flowise WriteFileTool arbitrary file write vulnerability](https://junglewise.ai/threats/cve-2025-61913-flowise-writefiletool-arbitrary-file-write-vulnerability) (critical, CVSS 9.9, published 8 Oct 2025) - [CVE-2026-41268: Flowise: Parameter Override Bypass Remote Command Execution](https://junglewise.ai/threats/cve-2026-41268-flowise-parameter-override-bypass-remote-command-execution) (critical, CVSS 9.8, published 23 Apr 2026) - [CVE-2026-73483: Flowise sandbox escape via puppeteer in NodeVM](https://junglewise.ai/threats/cve-2026-73483-flowise-sandbox-escape-via-puppeteer-in-nodevm) (critical, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-41137: Flowise: Code Injection in CSVAgent leads to Authenticated RCE](https://junglewise.ai/threats/cve-2026-41137-flowise-code-injection-in-csvagent-leads-to-authenticated-rce) (high, CVSS 8.8, published 23 Apr 2026) - [CVE-2026-73486: Flowise CSV Agent code injection via customReadCSV](https://junglewise.ai/threats/cve-2026-73486-flowise-csv-agent-code-injection-via-customreadcsv) (high, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-73485: Flowise Airtable Agent code injection in pyodide](https://junglewise.ai/threats/cve-2026-73485-flowise-airtable-agent-code-injection-in-pyodide) (high, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-91931: Flowise Custom MCP remote code execution via npx](https://junglewise.ai/threats/cve-2026-91931-flowise-custom-mcp-remote-code-execution-via-npx) (high, CVSS 8.5, published 15 Sep 2026) - [CVE-2026-100608: Flowise authorization bypass in BullMQ admin dashboard](https://junglewise.ai/threats/cve-2026-100608-flowise-through-3-1-4-does-not-enforce-authorization-on-the) (high, CVSS 8.3, published 26 Sep 2026) - [CVE-2026-67620: Flowise server-side request forgery in metadata service guard](https://junglewise.ai/threats/cve-2026-67620-flowise-server-side-request-forgery-in-metadata-service-guard) (high, CVSS 7.7, published 8 Aug 2026) - [CVE-2026-67621: Flowise missing authorization in document store operations](https://junglewise.ai/threats/cve-2026-67621-flowise-missing-authorization-in-document-store-operations) (high, CVSS 7.6, published 6 Aug 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 4 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 3 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Flowise technologies - [Flowise](https://junglewise.ai/threats/technologies/flowise-flowise): 5 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Flowise vulnerabilities", https://junglewise.ai/threats/vendors/flowise, 12 November 2026.