# FlowiseAI vulnerabilities

Source: https://junglewise.ai/threats/vendors/flowiseai  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/flowiseai.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 40 vulnerabilities in FlowiseAI: 0 in the last 7 days and 5 in the last 90 days, 11 of them critical and 0 exploited in the wild. The most recent, CVE-2026-119978, was published on 30 October 2026. 1 vulnerability in the last four weeks, down 75% on the four before (4). 3 technologies have a page of their own.

## Counts

- Last 7 days: 0
- Last 30 days: 1
- Last 90 days: 5
- All time: 40 (11 critical, 0 exploited in the wild)

## About FlowiseAI

FlowiseAI is a no-code platform for building conversational AI applications with customizable workflows.

## Latest FlowiseAI vulnerabilities

- [CVE-2026-119978: Flowise sandbox escape in custom function endpoint](https://junglewise.ai/threats/cve-2026-119978-flowise-through-3-1-4-contains-a-sandbox-escape-vulnerability) (high, CVSS 8.5, published 30 Oct 2026)
- [CVE-2026-100609: Flowise credential lookup authorization bypass](https://junglewise.ai/threats/cve-2026-100609-flowise-npm-packages-flowise-and-flowise-components-through-3-1) (medium, CVSS 6.8, published 26 Sep 2026)
- [CVE-2026-100607: Flowise authentication bypass via email-only SSO matching](https://junglewise.ai/threats/cve-2026-100607-flowise-through-3-1-4-resolves-sso-and-local-password-users) (high, CVSS 7.7, published 26 Sep 2026)
- [CVE-2026-100606: Flowise authentication bypass in SSO login path](https://junglewise.ai/threats/cve-2026-100606-flowise-through-3-1-4-enterprise-platform-mode-with-sso-enabled) (high, CVSS 7.7, published 26 Sep 2026)
- [CVE-2026-100605: Flowise missing authorization checks on chat message routes](https://junglewise.ai/threats/cve-2026-100605-flowise-through-3-1-4-contains-missing-route-level-rbac-checks) (high, CVSS 7.1, published 26 Sep 2026)
- [CVE-2026-73487: Flowise CSV and Airtable Agent prompt injection to RCE](https://junglewise.ai/threats/cve-2026-73487-flowise-csv-and-airtable-agent-prompt-injection-to-rce) (critical, CVSS 9.8, published 13 Aug 2026)
- [CVE-2026-71962: Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST…](https://junglewise.ai/threats/cve-2026-71962-flowise-versions-2-2-4-through-3-1-4-contain-a-missing) (high, CVSS 7.5, published 10 Aug 2026)
- [CVE-2026-70636: Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access…](https://junglewise.ai/threats/cve-2026-70636-flowise-through-3-1-4-contains-an-authentication-bypass) (high, CVSS 7.5, published 6 Aug 2026)
- [CVE-2025-71338: Flowise path traversal and arbitrary file write in document-store API](https://junglewise.ai/threats/cve-2025-71338-flowise-path-traversal-and-arbitrary-file-write-in-document-store) (critical, CVSS 10, published 25 Jun 2026)
- [CVE-2025-71336: Flowise remote code execution in Custom MCP feature](https://junglewise.ai/threats/cve-2025-71336-flowise-remote-code-execution-in-custom-mcp-feature) (critical, CVSS 9.8, published 25 Jun 2026)
- [CVE-2025-71334: FlowiseAI Flowise arbitrary file access and path traversal](https://junglewise.ai/threats/cve-2025-71334-flowiseai-flowise-arbitrary-file-access-and-path-traversal) (critical, CVSS 9.8, published 25 Jun 2026)
- [CVE-2026-46476: Flowise mass assignment in CustomTemplate allows cross-workspace takeover](https://junglewise.ai/threats/cve-2026-46476-flowise-mass-assignment-in-customtemplate-allows-cross-workspace) (high, CVSS 4, published 8 Jun 2026)
- [CVE-2026-46441: FlowiseAI mass assignment in assistant update endpoint](https://junglewise.ai/threats/cve-2026-46441-flowiseai-mass-assignment-in-assistant-update-endpoint) (high, CVSS 4, published 8 Jun 2026)
- [CVE-2026-46440: FlowiseAI Flowise insufficient credential protection in checkBasicAuth](https://junglewise.ai/threats/cve-2026-46440-flowiseai-flowise-insufficient-credential-protection-in) (high, CVSS 7.5, published 8 Jun 2026)
- [CVE-2026-8028: A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file…](https://junglewise.ai/threats/cve-2026-8028-a-vulnerability-was-detected-in-flowiseai-flowise-up-to-3-0-12) (low, CVSS 3.7, published 6 May 2026)
- [CVE-2026-8027: A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown…](https://junglewise.ai/threats/cve-2026-8027-a-weakness-has-been-identified-in-flowiseai-flowise-up-to-3-0-12) (medium, CVSS 4.3, published 6 May 2026)
- [CVE-2026-8026: FlowiseAI Flowise bcrypt password hash exposure in API responses](https://junglewise.ai/threats/cve-2026-8026-flowiseai-flowise-bcrypt-password-hash-exposure-in-api-responses) (low, CVSS 3.7, published 6 May 2026)
- [CVE-2026-41274: Flowise: Cypher Injection in GraphCypherQAChain](https://junglewise.ai/threats/cve-2026-41274-flowise-cypher-injection-in-graphcypherqachain) (critical, CVSS 9.8, published 23 Apr 2026)
- [CVE-2026-41279: Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs , enables API credit abuse via stored credentials](https://junglewise.ai/threats/cve-2026-41279-flowise-unauthenticated-tts-endpoint-accepts-arbitrary-credential) (high, CVSS 7.5, published 23 Apr 2026)
- [CVE-2026-41278: Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs](https://junglewise.ai/threats/cve-2026-41278-flowise-public-chatflow-endpoints-return-unsanitized-flowdata) (high, CVSS 7.5, published 23 Apr 2026)
- [CVE-2026-41277: Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)](https://junglewise.ai/threats/cve-2026-41277-flowise-mass-assignment-in-documentstore-create-endpoint-leads-to) (high, CVSS 8.8, published 23 Apr 2026)
- [CVE-2026-41276: Flowise: resetPassword Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2026-41276-flowise-resetpassword-authentication-bypass-vulnerability) (critical, CVSS 9.8, published 23 Apr 2026)
- [CVE-2026-41275: Flowise: Password Reset Link Sent Over Unsecured HTTP](https://junglewise.ai/threats/cve-2026-41275-flowise-password-reset-link-sent-over-unsecured-http) (high, CVSS 7.5, published 23 Apr 2026)
- [CVE-2026-41273: Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise](https://junglewise.ai/threats/cve-2026-41273-flowise-unauthenticated-oauth-2-0-access-token-disclosure-via) (high, CVSS 8.2, published 23 Apr 2026)
- [CVE-2026-41272: Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)](https://junglewise.ai/threats/cve-2026-41272-flowise-ssrf-protection-bypass-toctou-default-insecure) (high, CVSS 7.1, published 23 Apr 2026)

## Most severe FlowiseAI vulnerabilities

- [CVE-2025-71338: Flowise path traversal and arbitrary file write in document-store API](https://junglewise.ai/threats/cve-2025-71338-flowise-path-traversal-and-arbitrary-file-write-in-document-store) (critical, CVSS 10, published 25 Jun 2026)
- [CVE-2025-61913: Flowise WriteFileTool arbitrary file write vulnerability](https://junglewise.ai/threats/cve-2025-61913-flowise-writefiletool-arbitrary-file-write-vulnerability) (critical, CVSS 9.9, published 8 Oct 2025)
- [CVE-2026-40933: Flowise Flowise authenticated RCE in MCP Adapters](https://junglewise.ai/threats/cve-2026-40933-flowise-flowise-authenticated-rce-in-mcp-adapters) (critical, CVSS 9.9, published 21 Apr 2026)
- [CVE-2026-41268: Flowise: Parameter Override Bypass Remote Command Execution](https://junglewise.ai/threats/cve-2026-41268-flowise-parameter-override-bypass-remote-command-execution) (critical, CVSS 9.8, published 23 Apr 2026)
- [CVE-2026-41276: Flowise: resetPassword Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2026-41276-flowise-resetpassword-authentication-bypass-vulnerability) (critical, CVSS 9.8, published 23 Apr 2026)
- [CVE-2025-71334: FlowiseAI Flowise arbitrary file access and path traversal](https://junglewise.ai/threats/cve-2025-71334-flowiseai-flowise-arbitrary-file-access-and-path-traversal) (critical, CVSS 9.8, published 25 Jun 2026)
- [CVE-2026-41264: Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2026-41264-flowise-csv-agent-prompt-injection-remote-code-execution) (critical, CVSS 9.8, published 23 Apr 2026)
- [CVE-2025-71336: Flowise remote code execution in Custom MCP feature](https://junglewise.ai/threats/cve-2025-71336-flowise-remote-code-execution-in-custom-mcp-feature) (critical, CVSS 9.8, published 25 Jun 2026)
- [CVE-2026-73487: Flowise CSV and Airtable Agent prompt injection to RCE](https://junglewise.ai/threats/cve-2026-73487-flowise-csv-and-airtable-agent-prompt-injection-to-rce) (critical, CVSS 9.8, published 13 Aug 2026)
- [CVE-2026-41265: Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2026-41265-flowise-airtable-agent-code-injection-remote-code-execution) (critical, CVSS 9.8, published 23 Apr 2026)

## Vulnerabilities per week

1 vulnerability in the last four weeks, down 75% on the four before (4).

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 4 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 1 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## FlowiseAI technologies

- [FlowiseAI Flowise](https://junglewise.ai/threats/technologies/flowiseai-flowise): 37 vulnerabilities
- [FlowiseAI Flowise-Components](https://junglewise.ai/threats/technologies/flowiseai-flowise-components): 8 vulnerabilities
- [FlowiseAI](https://junglewise.ai/threats/technologies/flowiseai): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "FlowiseAI vulnerabilities", https://junglewise.ai/threats/vendors/flowiseai, 12 November 2026.