Critical
Flowise through 3.1.4 Authentication Bypass via Email-Only SSO
Type: advisorySource: Official CVE List
Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifier bindings, allowing attackers to authenticate as any existing user by claiming their email at a…
Products: FlowiseCVEs: CVE-2026-100607