--- title: "FlowiseAI vulnerabilities: CVEs, CISA KEV and security advisories" url: https://radicalnotion.ai/vendor/flowiseai type: vendor description: "FlowiseAI has 152 published CVEs, 0 in CISA KEV and 132 with public exploits." updated: 2026-10-30 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # FlowiseAI vulnerabilities - **Published CVEs:** 152 - **In CISA KEV:** 0 - **With a public exploit:** 132 - **With a patch:** 129 - **Average CVSS:** 8.0 - **CVEs in the last two years:** 142 - **First CVE:** 2024-04-29 - **Latest CVE:** 2026-10-30 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 47 | | High | 77 | | Medium | 27 | | Low | 1 | | Unscored | 0 | ## Most affected products | Product | CVEs | | --- | --- | | [Flowise](https://radicalnotion.ai/vendor/flowiseai/flowise) | 152 | | [flowise-components](https://radicalnotion.ai/vendor/flowiseai/flowise-components) | 27 | | [embed](https://radicalnotion.ai/vendor/flowiseai/embed) | 1 | | [FlowiseChatEmbed](https://radicalnotion.ai/vendor/flowiseai/flowisechatembed) | 1 | | [Flowise Cloud](https://radicalnotion.ai/vendor/flowiseai/flowise-cloud) | 1 | | [flowise-embed](https://radicalnotion.ai/vendor/flowiseai/flowise-embed) | 1 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-94](https://radicalnotion.ai/cwe/cwe-94) | Improper Control of Generation of Code ('Code Injection') | 18 | | [CWE-918](https://radicalnotion.ai/cwe/cwe-918) | Server-Side Request Forgery (SSRF) | 12 | | [CWE-862](https://radicalnotion.ai/cwe/cwe-862) | Missing Authorization | 12 | | [CWE-639](https://radicalnotion.ai/cwe/cwe-639) | Authorization Bypass Through User-Controlled Key | 11 | | [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 9 | | [CWE-915](https://radicalnotion.ai/cwe/cwe-915) | Improperly Controlled Modification of Dynamically-Determined Object Attributes | 9 | | [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 7 | | [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 6 | ## Assigning CNAs | CNA | CVEs | | --- | --- | | [GitHub\_M](https://radicalnotion.ai/cna/github-m) | 74 | | [VulnCheck](https://radicalnotion.ai/cna/vulncheck) | 61 | | [mitre](https://radicalnotion.ai/cna/mitre) | 7 | | [VulDB](https://radicalnotion.ai/cna/vuldb) | 5 | | [tenable](https://radicalnotion.ai/cna/tenable) | 3 | | [JFROG](https://radicalnotion.ai/cna/jfrog) | 2 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2024 | 10 | | 2025 | 14 | | 2026 | 128 | ## Latest CVEs | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-119978 | Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore | critical | 9.0 | 0.3% | No | 2026-10-30 | | CVE-2026-100610 | Flowise through 3.1.4 Missing Authorization via upsert-history | high | 7.7 | 0.3% | No | 2026-09-26 | | CVE-2026-100609 | Flowise through 3.1.4 Insecure Direct Object Reference via Credential | high | 7.6 | 0.3% | No | 2026-09-26 | | CVE-2026-100608 | Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard | high | 8.7 | 0.3% | No | 2026-09-26 | | CVE-2026-100607 | Flowise through 3.1.4 Authentication Bypass via Email-Only SSO | critical | 9.2 | 0.4% | No | 2026-09-26 | | CVE-2026-100606 | Flowise through 3.1.4 Authentication Bypass via SSO Email Match | critical | 9.2 | 0.5% | No | 2026-09-26 | | CVE-2026-100605 | Flowise through 3.1.4 Missing Authorization via Chat Message Routes | high | 7.5 | 0.3% | No | 2026-09-26 | | CVE-2026-91938 | Flowise before 3.1.4 Server-Side Request Forgery via document loaders | high | 7.6 | 0.4% | No | 2026-09-15 | | CVE-2026-91937 | Flowise before 3.1.4 NoSQL Injection via sessionId | high | 8.7 | 0.5% | No | 2026-09-15 | | CVE-2026-91936 | Flowise before 3.1.4 Script Injection via Docker Workflows | high | 8.3 | 0.5% | No | 2026-09-15 | | CVE-2026-91935 | Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes | high | 8.7 | 0.4% | No | 2026-09-15 | | CVE-2026-91934 | Flowise before 3.1.4 Remote Code Execution via SQL Database Chain | high | 8.7 | 0.7% | No | 2026-09-15 | ## Frequently asked questions ### How many CVEs does FlowiseAI have? FlowiseAI has 152 published CVE records since 2024, including 142 in the last two years. ### How many FlowiseAI CVEs are in CISA KEV? None of FlowiseAI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Which FlowiseAI products have the most CVEs? The FlowiseAI products with the most published CVEs are Flowise, flowise-components, embed, FlowiseChatEmbed, Flowise Cloud. ### What are the most common weakness types in FlowiseAI CVEs? FlowiseAI's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-862 (Missing Authorization), CWE-639 (Authorization Bypass Through User-Controlled Key). ### Are there public exploits for FlowiseAI vulnerabilities? Yes — 132 of FlowiseAI's CVEs have a known public exploit. ### How many critical FlowiseAI vulnerabilities are there? FlowiseAI has 47 critical and 77 high-severity CVEs. ### What is the average severity of FlowiseAI CVEs? The average CVSS base score across FlowiseAI's scored CVEs is 8.0. ## Related vendors - [Ubiquiti](https://radicalnotion.ai/vendor/ubiquiti) (154 CVEs) - [Mitel](https://radicalnotion.ai/vendor/mitel) (153 CVEs) - [Squid Cache](https://radicalnotion.ai/vendor/squid-cache) (153 CVEs) - [10Web](https://radicalnotion.ai/vendor/10web) (152 CVEs) - [Check Point](https://radicalnotion.ai/vendor/checkpoint) (151 CVEs) - [Ruby on Rails](https://radicalnotion.ai/vendor/rubyonrails) (151 CVEs) - [HDFGroup](https://radicalnotion.ai/vendor/hdfgroup) (151 CVEs) - [mandrakesoft](https://radicalnotion.ai/vendor/mandrakesoft) (151 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/flowiseai). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.