{"schema_version":"2","view":"grouped","data":[{"id":12693,"cve_ids":["CVE-2025-34267"],"payload":{"kind":"advisory","title":"Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages","summary":"Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.","evidence":"cve:CVE-2025-34267","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-34267","aliases":["CVE-2025-34267"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.4,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:L","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/FlowiseAI/Flowise","vendor":"FlowiseAI","modules":["nodevm-based tool execution harness"],"product":"Flowise","versions":[{"status":"affected","version":"3.0.1","versionType":"semver","lessThanOrEqual":"3.0.8"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:21:19.785Z","provider":"cve","references":["https://flowiseai.com/","https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5w3r-f6gm-c25w","https://github.com/FlowiseAI/Flowise/pull/5231","https://www.vulncheck.com/advisories/flowise-auth-command-execution-and-sandbox-bypass-via-puppeteer-and-playwright-packages"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-34267","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-14T20:32:58.710614Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-10-14T20:33:19.338Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:21:19.785Z"}}},"related_cves":[{"value":"CVE-2025-34267","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aa63b324-4689-43bf-96ce-a03df930167b","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-34267","advisory_id":"aa63b324-4689-43bf-96ce-a03df930167b","event_types":["advisory"],"published_at":"2026-10-25T00:10:35.556727+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2025-10-14T19:31:50.914+00:00","detail_url":"/advisories/advisory%3Aaa63b324-4689-43bf-96ce-a03df930167b","group":{"id":"advisory:aa63b324-4689-43bf-96ce-a03df930167b","revision":1,"primary_event_id":12629,"change":"published","superseded_by":[],"changed":{"id":12629,"cve_ids":["CVE-2025-34267"],"payload":{"kind":"advisory","title":"Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages","summary":"Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.","evidence":"cve:CVE-2025-34267","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-34267","aliases":["CVE-2025-34267"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.4,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:L","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/FlowiseAI/Flowise","vendor":"FlowiseAI","modules":["nodevm-based tool execution harness"],"product":"Flowise","versions":[{"status":"affected","version":"3.0.1","versionType":"semver","lessThanOrEqual":"3.0.8"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:21:19.785Z","provider":"cve","references":["https://flowiseai.com/","https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5w3r-f6gm-c25w","https://github.com/FlowiseAI/Flowise/pull/5231","https://www.vulncheck.com/advisories/flowise-auth-command-execution-and-sandbox-bypass-via-puppeteer-and-playwright-packages"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-34267","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-14T20:32:58.710614Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-10-14T20:33:19.338Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:21:19.785Z"}}},"related_cves":[{"value":"CVE-2025-34267","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aa63b324-4689-43bf-96ce-a03df930167b","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-34267","advisory_id":"aa63b324-4689-43bf-96ce-a03df930167b","event_types":["advisory"],"published_at":"2026-10-25T00:10:35.556727+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2025-10-14T19:31:50.914+00:00","detail_url":"/events/12629"},"members":[{"id":12629,"cve_ids":["CVE-2025-34267"],"payload":{"kind":"advisory","title":"Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages","summary":"Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.","evidence":"cve:CVE-2025-34267","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-34267","aliases":["CVE-2025-34267"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.4,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:L","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/FlowiseAI/Flowise","vendor":"FlowiseAI","modules":["nodevm-based tool execution harness"],"product":"Flowise","versions":[{"status":"affected","version":"3.0.1","versionType":"semver","lessThanOrEqual":"3.0.8"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-10-08T15:21:19.785Z","provider":"cve","references":["https://flowiseai.com/","https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5w3r-f6gm-c25w","https://github.com/FlowiseAI/Flowise/pull/5231","https://www.vulncheck.com/advisories/flowise-auth-command-execution-and-sandbox-bypass-via-puppeteer-and-playwright-packages"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-34267","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-14T20:32:58.710614Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-10-14T20:33:19.338Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-08T15:21:19.785Z"}}},"related_cves":[{"value":"CVE-2025-34267","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aa63b324-4689-43bf-96ce-a03df930167b","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-34267","advisory_id":"aa63b324-4689-43bf-96ce-a03df930167b","event_types":["advisory"],"published_at":"2026-10-25T00:10:35.556727+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2025-10-14T19:31:50.914+00:00","detail_url":"/events/12629"}]}},{"id":8764,"cve_ids":["CVE-2026-100608"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard","summary":"Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode (MODE=queue, ENABLE_BULLMQ_DASHBOARD=true, and !isCloud()), the /admin/queues mount is protected only by the verifyTokenForBullMQDashboard middleware, which validates the JWT but performs no role, permission, or workspace/organization scoping check; the mount also lies outside /api/v1/* so the global API gate does not apply. As a result, any authenticated user — including the lowest-privileged member of any tenant — can reach the full Bull-Board UI and view all queues and job payloads across the entire instance, including chat inputs and overrideConfig (which may carry credentials and prompts), chatflow.flowData graph definitions with custom function source code, credential IDs and system prompts, chatIds, files, and the originating orgId/workspaceId. The dashboard's write actions (retry, remove, promote, clean) are likewise usable across tenants. No patched version is available as of the advisory.","evidence":"cve:CVE-2026-100608","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100608","aliases":["CVE-2026-100608"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-10-05T15:57:31.978Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authorization-bypass-via-bullmq-dashboard"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100608","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T15:57:25.782139Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:57:31.978Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:51.224Z"}}},"related_cves":[{"value":"CVE-2026-100608","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:eb57d4a8-a432-40f2-a297-24baa83b77e0","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100608","advisory_id":"eb57d4a8-a432-40f2-a297-24baa83b77e0","event_types":["advisory"],"published_at":"2026-10-24T23:05:50.626464+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:51.224+00:00","detail_url":"/advisories/advisory%3Aeb57d4a8-a432-40f2-a297-24baa83b77e0","group":{"id":"advisory:eb57d4a8-a432-40f2-a297-24baa83b77e0","revision":1,"primary_event_id":8754,"change":"published","superseded_by":[],"changed":{"id":8754,"cve_ids":["CVE-2026-100608"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard","summary":"Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode (MODE=queue, ENABLE_BULLMQ_DASHBOARD=true, and !isCloud()), the /admin/queues mount is protected only by the verifyTokenForBullMQDashboard middleware, which validates the JWT but performs no role, permission, or workspace/organization scoping check; the mount also lies outside /api/v1/* so the global API gate does not apply. As a result, any authenticated user — including the lowest-privileged member of any tenant — can reach the full Bull-Board UI and view all queues and job payloads across the entire instance, including chat inputs and overrideConfig (which may carry credentials and prompts), chatflow.flowData graph definitions with custom function source code, credential IDs and system prompts, chatIds, files, and the originating orgId/workspaceId. The dashboard's write actions (retry, remove, promote, clean) are likewise usable across tenants. No patched version is available as of the advisory.","evidence":"cve:CVE-2026-100608","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100608","aliases":["CVE-2026-100608"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-10-05T15:57:31.978Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authorization-bypass-via-bullmq-dashboard"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100608","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T15:57:25.782139Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:57:31.978Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:51.224Z"}}},"related_cves":[{"value":"CVE-2026-100608","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:eb57d4a8-a432-40f2-a297-24baa83b77e0","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100608","advisory_id":"eb57d4a8-a432-40f2-a297-24baa83b77e0","event_types":["advisory"],"published_at":"2026-10-24T23:05:50.626464+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:51.224+00:00","detail_url":"/events/8754"},"members":[{"id":8754,"cve_ids":["CVE-2026-100608"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard","summary":"Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode (MODE=queue, ENABLE_BULLMQ_DASHBOARD=true, and !isCloud()), the /admin/queues mount is protected only by the verifyTokenForBullMQDashboard middleware, which validates the JWT but performs no role, permission, or workspace/organization scoping check; the mount also lies outside /api/v1/* so the global API gate does not apply. As a result, any authenticated user — including the lowest-privileged member of any tenant — can reach the full Bull-Board UI and view all queues and job payloads across the entire instance, including chat inputs and overrideConfig (which may carry credentials and prompts), chatflow.flowData graph definitions with custom function source code, credential IDs and system prompts, chatIds, files, and the originating orgId/workspaceId. The dashboard's write actions (retry, remove, promote, clean) are likewise usable across tenants. No patched version is available as of the advisory.","evidence":"cve:CVE-2026-100608","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100608","aliases":["CVE-2026-100608"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-10-05T15:57:31.978Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authorization-bypass-via-bullmq-dashboard"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100608","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T15:57:25.782139Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:57:31.978Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:51.224Z"}}},"related_cves":[{"value":"CVE-2026-100608","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:eb57d4a8-a432-40f2-a297-24baa83b77e0","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100608","advisory_id":"eb57d4a8-a432-40f2-a297-24baa83b77e0","event_types":["advisory"],"published_at":"2026-10-24T23:05:50.626464+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:51.224+00:00","detail_url":"/events/8754"}]}},{"id":4172,"cve_ids":["CVE-2026-100609"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Insecure Direct Object Reference via Credential","summary":"Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOneBy({ id: credentialId }) with no workspaceId condition) in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant (GET /api/v1/openai-assistants and /api/v1/openai-assistants/:id), uploadFilesToAssistant (POST /api/v1/openai-assistants-file/upload/), deleteAssistant (DELETE /api/v1/assistants/:id, reachable by first importing a poisoned assistant row via POST /api/v1/export-import/import), and the shared helper used by getVoices (GET /api/v1/text-to-speech/voices). An authenticated user of one workspace can supply a credential UUID belonging to another workspace, causing the server to decrypt and use that workspace's OpenAI or ElevenLabs API key on the attacker's behalf. No patched version was available at the time of publication.","evidence":"cve:CVE-2026-100609","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Flowise","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100609","aliases":["CVE-2026-100609"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"},{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise-components","defaultStatus":"unaffected"}],"modified":"2026-09-30T12:50:05.029Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c","https://www.vulncheck.com/advisories/flowise-through-3.1.4-insecure-direct-object-reference-via-credential"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100609","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T12:49:36.319783Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T12:50:05.029Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:51.940Z"}}},"related_cves":[{"value":"CVE-2026-100609","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e5ede343-c97e-46f2-9aa6-f4ffe30df7fa","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100609","advisory_id":"e5ede343-c97e-46f2-9aa6-f4ffe30df7fa","event_types":["advisory"],"published_at":"2026-10-24T21:47:53.887267+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:51.94+00:00","detail_url":"/advisories/advisory%3Ae5ede343-c97e-46f2-9aa6-f4ffe30df7fa","group":{"id":"advisory:e5ede343-c97e-46f2-9aa6-f4ffe30df7fa","revision":1,"primary_event_id":4187,"change":"published","superseded_by":[],"changed":{"id":4187,"cve_ids":["CVE-2026-100609"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Insecure Direct Object Reference via Credential","summary":"Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOneBy({ id: credentialId }) with no workspaceId condition) in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant (GET /api/v1/openai-assistants and /api/v1/openai-assistants/:id), uploadFilesToAssistant (POST /api/v1/openai-assistants-file/upload/), deleteAssistant (DELETE /api/v1/assistants/:id, reachable by first importing a poisoned assistant row via POST /api/v1/export-import/import), and the shared helper used by getVoices (GET /api/v1/text-to-speech/voices). An authenticated user of one workspace can supply a credential UUID belonging to another workspace, causing the server to decrypt and use that workspace's OpenAI or ElevenLabs API key on the attacker's behalf. No patched version was available at the time of publication.","evidence":"cve:CVE-2026-100609","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Flowise","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100609","aliases":["CVE-2026-100609"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"},{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise-components","defaultStatus":"unaffected"}],"modified":"2026-09-30T12:50:05.029Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c","https://www.vulncheck.com/advisories/flowise-through-3.1.4-insecure-direct-object-reference-via-credential"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100609","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T12:49:36.319783Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T12:50:05.029Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:51.940Z"}}},"related_cves":[{"value":"CVE-2026-100609","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e5ede343-c97e-46f2-9aa6-f4ffe30df7fa","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100609","advisory_id":"e5ede343-c97e-46f2-9aa6-f4ffe30df7fa","event_types":["advisory"],"published_at":"2026-10-24T21:47:53.887267+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:51.94+00:00","detail_url":"/events/4187"},"members":[{"id":4187,"cve_ids":["CVE-2026-100609"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Insecure Direct Object Reference via Credential","summary":"Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOneBy({ id: credentialId }) with no workspaceId condition) in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant (GET /api/v1/openai-assistants and /api/v1/openai-assistants/:id), uploadFilesToAssistant (POST /api/v1/openai-assistants-file/upload/), deleteAssistant (DELETE /api/v1/assistants/:id, reachable by first importing a poisoned assistant row via POST /api/v1/export-import/import), and the shared helper used by getVoices (GET /api/v1/text-to-speech/voices). An authenticated user of one workspace can supply a credential UUID belonging to another workspace, causing the server to decrypt and use that workspace's OpenAI or ElevenLabs API key on the attacker's behalf. No patched version was available at the time of publication.","evidence":"cve:CVE-2026-100609","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Flowise","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100609","aliases":["CVE-2026-100609"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"},{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise-components","defaultStatus":"unaffected"}],"modified":"2026-09-30T12:50:05.029Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c","https://www.vulncheck.com/advisories/flowise-through-3.1.4-insecure-direct-object-reference-via-credential"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100609","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T12:49:36.319783Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T12:50:05.029Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:51.940Z"}}},"related_cves":[{"value":"CVE-2026-100609","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e5ede343-c97e-46f2-9aa6-f4ffe30df7fa","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100609","advisory_id":"e5ede343-c97e-46f2-9aa6-f4ffe30df7fa","event_types":["advisory"],"published_at":"2026-10-24T21:47:53.887267+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:51.94+00:00","detail_url":"/events/4187"}]}},{"id":4170,"cve_ids":["CVE-2026-100605"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Missing Authorization via Chat Message Routes","summary":"Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API keys to read and delete chat history. Attackers with valid but low-privileged API keys can access GET and DELETE chat message routes without required flow permissions to read chat histories, prompts, model responses, and delete messages.","evidence":"cve:CVE-2026-100605","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100605","aliases":["CVE-2026-100605"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-30T12:48:59.289Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-ppmg-4cx6-95hh","https://www.vulncheck.com/advisories/flowise-through-3.1.4-missing-authorization-via-chat-message-routes"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100605","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T12:48:27.297528Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-ppmg-4cx6-95hh","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T12:48:59.289Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:49.124Z"}}},"related_cves":[{"value":"CVE-2026-100605","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b004299f-25c6-4944-8b37-eeb09afee6f8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100605","advisory_id":"b004299f-25c6-4944-8b37-eeb09afee6f8","event_types":["advisory"],"published_at":"2026-10-24T21:47:52.668601+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:49.124+00:00","detail_url":"/advisories/advisory%3Ab004299f-25c6-4944-8b37-eeb09afee6f8","group":{"id":"advisory:b004299f-25c6-4944-8b37-eeb09afee6f8","revision":1,"primary_event_id":4185,"change":"published","superseded_by":[],"changed":{"id":4185,"cve_ids":["CVE-2026-100605"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Missing Authorization via Chat Message Routes","summary":"Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API keys to read and delete chat history. Attackers with valid but low-privileged API keys can access GET and DELETE chat message routes without required flow permissions to read chat histories, prompts, model responses, and delete messages.","evidence":"cve:CVE-2026-100605","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100605","aliases":["CVE-2026-100605"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-30T12:48:59.289Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-ppmg-4cx6-95hh","https://www.vulncheck.com/advisories/flowise-through-3.1.4-missing-authorization-via-chat-message-routes"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100605","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T12:48:27.297528Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-ppmg-4cx6-95hh","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T12:48:59.289Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:49.124Z"}}},"related_cves":[{"value":"CVE-2026-100605","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b004299f-25c6-4944-8b37-eeb09afee6f8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100605","advisory_id":"b004299f-25c6-4944-8b37-eeb09afee6f8","event_types":["advisory"],"published_at":"2026-10-24T21:47:52.668601+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:49.124+00:00","detail_url":"/events/4185"},"members":[{"id":4185,"cve_ids":["CVE-2026-100605"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Missing Authorization via Chat Message Routes","summary":"Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API keys to read and delete chat history. Attackers with valid but low-privileged API keys can access GET and DELETE chat message routes without required flow permissions to read chat histories, prompts, model responses, and delete messages.","evidence":"cve:CVE-2026-100605","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100605","aliases":["CVE-2026-100605"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-30T12:48:59.289Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-ppmg-4cx6-95hh","https://www.vulncheck.com/advisories/flowise-through-3.1.4-missing-authorization-via-chat-message-routes"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100605","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-30T12:48:27.297528Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-ppmg-4cx6-95hh","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-30T12:48:59.289Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:49.124Z"}}},"related_cves":[{"value":"CVE-2026-100605","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b004299f-25c6-4944-8b37-eeb09afee6f8","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100605","advisory_id":"b004299f-25c6-4944-8b37-eeb09afee6f8","event_types":["advisory"],"published_at":"2026-10-24T21:47:52.668601+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:49.124+00:00","detail_url":"/events/4185"}]}},{"id":3297,"cve_ids":["CVE-2026-100610"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Missing Authorization via upsert-history","summary":"Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history without route-level permission checks, and the backing service performs no workspace or ownership validation. getAllUpsertHistory() returns UpsertHistory rows selected solely by an attacker-supplied chatflowid, and patchDeleteUpsertHistory() deletes rows by an attacker-supplied array of record UUIDs. As a result, any authenticated low-privilege user or valid API key can read or delete document-store upsert history belonging to other users and other workspaces whenever the target chatflowId (which is exposed publicly in /chatbot/ share links) or row ids are known. The retrievable flowData and result fields contain embedding, record-manager and vector-store node configuration, including per-node paramValues. No patched version is available.","evidence":"cve:CVE-2026-100610","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100610","aliases":["CVE-2026-100610"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T19:07:04.058Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jvx3-mjpw-r4gh","https://www.vulncheck.com/advisories/flowise-through-3.1.4-missing-authorization-via-upsert-history"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100610","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T19:06:25.578629Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jvx3-mjpw-r4gh","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T19:07:04.058Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:52.636Z"}}},"related_cves":[{"value":"CVE-2026-100610","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:73c24a6c-fa84-459b-93e1-773eaf762ce5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100610","advisory_id":"73c24a6c-fa84-459b-93e1-773eaf762ce5","event_types":["advisory"],"published_at":"2026-10-24T21:33:26.100095+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:52.636+00:00","detail_url":"/advisories/advisory%3A73c24a6c-fa84-459b-93e1-773eaf762ce5","group":{"id":"advisory:73c24a6c-fa84-459b-93e1-773eaf762ce5","revision":1,"primary_event_id":3310,"change":"published","superseded_by":[],"changed":{"id":3310,"cve_ids":["CVE-2026-100610"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Missing Authorization via upsert-history","summary":"Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history without route-level permission checks, and the backing service performs no workspace or ownership validation. getAllUpsertHistory() returns UpsertHistory rows selected solely by an attacker-supplied chatflowid, and patchDeleteUpsertHistory() deletes rows by an attacker-supplied array of record UUIDs. As a result, any authenticated low-privilege user or valid API key can read or delete document-store upsert history belonging to other users and other workspaces whenever the target chatflowId (which is exposed publicly in /chatbot/ share links) or row ids are known. The retrievable flowData and result fields contain embedding, record-manager and vector-store node configuration, including per-node paramValues. No patched version is available.","evidence":"cve:CVE-2026-100610","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100610","aliases":["CVE-2026-100610"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T19:07:04.058Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jvx3-mjpw-r4gh","https://www.vulncheck.com/advisories/flowise-through-3.1.4-missing-authorization-via-upsert-history"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100610","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T19:06:25.578629Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jvx3-mjpw-r4gh","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T19:07:04.058Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:52.636Z"}}},"related_cves":[{"value":"CVE-2026-100610","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:73c24a6c-fa84-459b-93e1-773eaf762ce5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100610","advisory_id":"73c24a6c-fa84-459b-93e1-773eaf762ce5","event_types":["advisory"],"published_at":"2026-10-24T21:33:26.100095+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:52.636+00:00","detail_url":"/events/3310"},"members":[{"id":3310,"cve_ids":["CVE-2026-100610"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Missing Authorization via upsert-history","summary":"Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history without route-level permission checks, and the backing service performs no workspace or ownership validation. getAllUpsertHistory() returns UpsertHistory rows selected solely by an attacker-supplied chatflowid, and patchDeleteUpsertHistory() deletes rows by an attacker-supplied array of record UUIDs. As a result, any authenticated low-privilege user or valid API key can read or delete document-store upsert history belonging to other users and other workspaces whenever the target chatflowId (which is exposed publicly in /chatbot/ share links) or row ids are known. The retrievable flowData and result fields contain embedding, record-manager and vector-store node configuration, including per-node paramValues. No patched version is available.","evidence":"cve:CVE-2026-100610","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100610","aliases":["CVE-2026-100610"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T19:07:04.058Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jvx3-mjpw-r4gh","https://www.vulncheck.com/advisories/flowise-through-3.1.4-missing-authorization-via-upsert-history"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100610","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T19:06:25.578629Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jvx3-mjpw-r4gh","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T19:07:04.058Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:52.636Z"}}},"related_cves":[{"value":"CVE-2026-100610","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:73c24a6c-fa84-459b-93e1-773eaf762ce5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100610","advisory_id":"73c24a6c-fa84-459b-93e1-773eaf762ce5","event_types":["advisory"],"published_at":"2026-10-24T21:33:26.100095+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:52.636+00:00","detail_url":"/events/3310"}]}},{"id":3296,"cve_ids":["CVE-2026-100606"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authentication Bypass via SSO Email Match","summary":"Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the SSO login path. When an SSO callback arrives with an email matching a user whose status is INVITED, verifyAndLogin (SSOBase.ts:80-94) copies the user record from the database — including the server-stored single-use invitation tempToken — into the data passed to AccountService.register(). The register handler's token lookup, email match, and expiry checks therefore pass trivially against the server's own token instead of a caller-supplied one, and the account and its organization membership are flipped to ACTIVE. As a result, anyone able to authenticate at any configured SSO provider using a pending invitee's email address as the email claim can take over that invitation and obtain the invited user's access to the organization without ever possessing the emailed invitation token, for as long as the invitation is valid (24 hours by default). At the time of the advisory no patched version was available.","evidence":"cve:CVE-2026-100606","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100606","aliases":["CVE-2026-100606"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T19:10:36.679Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vf3j-89vf-r697","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authentication-bypass-via-sso-email-match"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100606","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T19:08:17.212056Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vf3j-89vf-r697","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T19:10:36.679Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:49.835Z"}}},"related_cves":[{"value":"CVE-2026-100606","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8a422661-bac3-42b2-925f-8bfeb1592475","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100606","advisory_id":"8a422661-bac3-42b2-925f-8bfeb1592475","event_types":["advisory"],"published_at":"2026-10-24T21:33:24.715693+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:49.835+00:00","detail_url":"/advisories/advisory%3A8a422661-bac3-42b2-925f-8bfeb1592475","group":{"id":"advisory:8a422661-bac3-42b2-925f-8bfeb1592475","revision":1,"primary_event_id":3308,"change":"published","superseded_by":[],"changed":{"id":3308,"cve_ids":["CVE-2026-100606"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authentication Bypass via SSO Email Match","summary":"Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the SSO login path. When an SSO callback arrives with an email matching a user whose status is INVITED, verifyAndLogin (SSOBase.ts:80-94) copies the user record from the database — including the server-stored single-use invitation tempToken — into the data passed to AccountService.register(). The register handler's token lookup, email match, and expiry checks therefore pass trivially against the server's own token instead of a caller-supplied one, and the account and its organization membership are flipped to ACTIVE. As a result, anyone able to authenticate at any configured SSO provider using a pending invitee's email address as the email claim can take over that invitation and obtain the invited user's access to the organization without ever possessing the emailed invitation token, for as long as the invitation is valid (24 hours by default). At the time of the advisory no patched version was available.","evidence":"cve:CVE-2026-100606","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100606","aliases":["CVE-2026-100606"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T19:10:36.679Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vf3j-89vf-r697","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authentication-bypass-via-sso-email-match"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100606","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T19:08:17.212056Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vf3j-89vf-r697","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T19:10:36.679Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:49.835Z"}}},"related_cves":[{"value":"CVE-2026-100606","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8a422661-bac3-42b2-925f-8bfeb1592475","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100606","advisory_id":"8a422661-bac3-42b2-925f-8bfeb1592475","event_types":["advisory"],"published_at":"2026-10-24T21:33:24.715693+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:49.835+00:00","detail_url":"/events/3308"},"members":[{"id":3308,"cve_ids":["CVE-2026-100606"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authentication Bypass via SSO Email Match","summary":"Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the SSO login path. When an SSO callback arrives with an email matching a user whose status is INVITED, verifyAndLogin (SSOBase.ts:80-94) copies the user record from the database — including the server-stored single-use invitation tempToken — into the data passed to AccountService.register(). The register handler's token lookup, email match, and expiry checks therefore pass trivially against the server's own token instead of a caller-supplied one, and the account and its organization membership are flipped to ACTIVE. As a result, anyone able to authenticate at any configured SSO provider using a pending invitee's email address as the email claim can take over that invitation and obtain the invited user's access to the organization without ever possessing the emailed invitation token, for as long as the invitation is valid (24 hours by default). At the time of the advisory no patched version was available.","evidence":"cve:CVE-2026-100606","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100606","aliases":["CVE-2026-100606"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T19:10:36.679Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vf3j-89vf-r697","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authentication-bypass-via-sso-email-match"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100606","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T19:08:17.212056Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vf3j-89vf-r697","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T19:10:36.679Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:49.835Z"}}},"related_cves":[{"value":"CVE-2026-100606","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8a422661-bac3-42b2-925f-8bfeb1592475","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100606","advisory_id":"8a422661-bac3-42b2-925f-8bfeb1592475","event_types":["advisory"],"published_at":"2026-10-24T21:33:24.715693+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:49.835+00:00","detail_url":"/events/3308"}]}},{"id":3221,"cve_ids":["CVE-2026-100607"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authentication Bypass via Email-Only SSO","summary":"Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifier bindings, allowing attackers to authenticate as any existing user by claiming their email at any configured SSO provider. Attackers can gain complete account access including chatflows, credentials, and API keys by authenticating through a different SSO provider or local password than the victim's original registration method.","evidence":"cve:CVE-2026-100607","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100607","aliases":["CVE-2026-100607"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:07:58.552Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authentication-bypass-via-email-only-sso"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100607","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T17:07:19.926137Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:07:58.552Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:50.537Z"}}},"related_cves":[{"value":"CVE-2026-100607","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:13844278-d59e-43b4-b7c2-e50dadb05670","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100607","advisory_id":"13844278-d59e-43b4-b7c2-e50dadb05670","event_types":["advisory"],"published_at":"2026-10-24T21:31:36.258465+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:50.537+00:00","detail_url":"/advisories/advisory%3A13844278-d59e-43b4-b7c2-e50dadb05670","group":{"id":"advisory:13844278-d59e-43b4-b7c2-e50dadb05670","revision":1,"primary_event_id":3233,"change":"published","superseded_by":[],"changed":{"id":3233,"cve_ids":["CVE-2026-100607"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authentication Bypass via Email-Only SSO","summary":"Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifier bindings, allowing attackers to authenticate as any existing user by claiming their email at any configured SSO provider. Attackers can gain complete account access including chatflows, credentials, and API keys by authenticating through a different SSO provider or local password than the victim's original registration method.","evidence":"cve:CVE-2026-100607","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100607","aliases":["CVE-2026-100607"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:07:58.552Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authentication-bypass-via-email-only-sso"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100607","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T17:07:19.926137Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:07:58.552Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:50.537Z"}}},"related_cves":[{"value":"CVE-2026-100607","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:13844278-d59e-43b4-b7c2-e50dadb05670","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100607","advisory_id":"13844278-d59e-43b4-b7c2-e50dadb05670","event_types":["advisory"],"published_at":"2026-10-24T21:31:36.258465+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:50.537+00:00","detail_url":"/events/3233"},"members":[{"id":3233,"cve_ids":["CVE-2026-100607"],"payload":{"kind":"advisory","title":"Flowise through 3.1.4 Authentication Bypass via Email-Only SSO","summary":"Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifier bindings, allowing attackers to authenticate as any existing user by claiming their email at any configured SSO provider. Attackers can gain complete account access including chatflows, credentials, and API keys by authenticating through a different SSO provider or local password than the victim's original registration method.","evidence":"cve:CVE-2026-100607","products":[{"name":{"value":"Flowise","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100607","aliases":["CVE-2026-100607"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"FlowiseAI","product":"Flowise","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"3.1.4"}],"packageURL":"pkg:npm/flowise","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:07:58.552Z","provider":"cve","references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr","https://www.vulncheck.com/advisories/flowise-through-3.1.4-authentication-bypass-via-email-only-sso"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100607","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T17:07:19.926137Z"}}}],"references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:07:58.552Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:22:50.537Z"}}},"related_cves":[{"value":"CVE-2026-100607","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:13844278-d59e-43b4-b7c2-e50dadb05670","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100607","advisory_id":"13844278-d59e-43b4-b7c2-e50dadb05670","event_types":["advisory"],"published_at":"2026-10-24T21:31:36.258465+00:00","technologies":["core-cve","flowise"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T13:22:50.537+00:00","detail_url":"/events/3233"}]}}],"next_after":12693,"next_before":3221}