Iniciar sesión
Deutsch English Español Polski
Alta

FlowiseAI Flowise arbitrary file upload vulnerability

  • Publicada: 05.03.2025
  • Actualizado: 11.10.2026 10:22

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Paquete de npm flowise <= 2.2.6 sin corrección

Referencias

Puntuación CVSS -
Vector CVSS
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Debilidad (CWE)
CWE-434
Plataforma
npm
Paquete
flowise
Publicada
05.03.2025
Actualizado
11.10.2026 10:22

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-69jq-qr7w-j7qh - CC BY 4.0

Historial de vulnerabilidades: flowise

Todas las vulnerabilidades publicadas de este paquete (Paquete de npm), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (114) en el archivo
Entradas en total
114
Primera → última
04.2024 10.2026
Sin corrección
16
Explotada en ataques
0

Distribución por gravedad

  • Crítica 28
  • Alta 62
  • Media 24

Divulgaciones por año

Gravedad:
  1. FlowiseAI Flowise arbitrary file upload vulnerability esta entrada
    Alta CVE-2025-26319 <= 2.2.6 sin corrección
  2. Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass
    Crítica CVE-2026-73487 < 3.1.3 3.1.3
  3. Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium
    Crítica CVE-2026-73483 < 3.1.3 3.1.3
  4. Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
    Crítica CVE-2026-70478 < 3.1.3 3.1.3
  5. Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
    Crítica CVE-2026-70477 < 3.1.3 3.1.3
  6. Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
    Alta CVE-2026-70476 < 3.1.3 3.1.3
  7. Flowise: Missing Authorization on Execution Update Endpoint
    Alta CVE-2026-70475 < 3.1.3 3.1.3
  8. Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
    Alta CVE-2026-70474 < 3.1.3 3.1.3
  9. Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
    Alta CVE-2026-70473 < 3.1.3 3.1.3
  10. Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
    Alta CVE-2026-70472 < 3.1.3 3.1.3
  11. Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
    Crítica CVE-2026-69264 < 3.1.3 3.1.3
  12. Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys
    Alta ghsa-88pr-878c-24wf < 3.1.3 3.1.3
  13. Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
    Alta CVE-2026-70471 < 3.1.3 3.1.3
  14. Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
    Crítica CVE-2026-70470 < 3.1.3 3.1.3
  15. Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
    Alta CVE-2026-69263 < 3.1.3 3.1.3
  16. Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
    Alta CVE-2026-69262 < 3.1.3 3.1.3
  17. Flowise RCE via SQLite Record Manager Node
    Crítica CVE-2026-69259 < 3.1.3 3.1.3
  18. Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
    Alta CVE-2026-69258 < 3.1.3 3.1.3
  19. Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
    Alta CVE-2026-69257 < 3.1.3 3.1.3
  20. Flowise: Remote Code Execution Vulnerability in CSVAgent
    Crítica CVE-2026-69256 < 3.1.3 3.1.3
  21. Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
    Crítica CVE-2026-69255 < 3.1.3 3.1.3
  22. Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
    Crítica CVE-2026-69254 < 3.1.3 3.1.3
  23. Flowise Sandbox Escape to RCE
    Crítica CVE-2026-69253 < 3.1.3 3.1.3
  24. Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
    Alta CVE-2026-69252 < 3.1.3 3.1.3
  25. Flowise RCE via TypeORM DataSource
    Crítica CVE-2026-69251 < 3.1.3 3.1.3
  26. Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
    Alta CVE-2026-69250 < 3.1.3 3.1.3
  27. FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover
    Alta · 8.8 CVE-2026-46480 < 3.1.2 3.1.2
  28. FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover
    Alta · 8.8 CVE-2026-46479 < 3.1.2 3.1.2
  29. FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover
    Alta · 8.8 CVE-2026-46478 < 3.1.2 3.1.2
  30. FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover
    Alta · 8.8 CVE-2026-46477 < 3.1.2 3.1.2
  31. FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover
    Alta CVE-2026-46476 < 3.1.2 3.1.2
  32. FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover
    Alta · 8.8 CVE-2026-46475 < 3.1.2 3.1.2
  33. FlowiseAI: Vector Store No Permission Checks
    Alta · 8.8 CVE-2026-46444 < 3.1.2 3.1.2
  34. FlowiseAI Vulnerable to Credential Data Leak
    Alta CVE-2026-46443 < 3.1.2 3.1.2
  35. FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape
    Crítica CVE-2026-46442 < 3.1.2 3.1.2
  36. FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment
    Alta CVE-2026-46441 < 3.1.2 3.1.2
  37. Flowise has an MCP Security Bypass that Enables RCE
    Alta CVE-2026-56274 < 3.1.2 3.1.2
  38. FlowiseAI Exposes Basic Auth Credentials via API
    Alta · 7.5 CVE-2026-46440 < 3.1.2 3.1.2
  39. FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment
    Alta CVE-2026-42863 < 3.1.2 3.1.2
  40. FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment
    Alta CVE-2026-42862 < 3.1.2 3.1.2
  41. FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment
    Alta CVE-2026-42861 < 3.1.2 3.1.2
Mostrar más (20) Mostrando 41 de 90

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.