---
title: "FlowiseAI Flowise vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/flowiseai/flowise
type: product
description: "FlowiseAI Flowise has 152 published CVEs, 0 in CISA KEV and 132 with public exploits."
updated: 2026-10-30
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# FlowiseAI Flowise vulnerabilities

Vendor: [FlowiseAI](https://radicalnotion.ai/vendor/flowiseai)

- **Published CVEs:** 152
- **In CISA KEV:** 0
- **With a public exploit:** 132
- **With a patch:** 129
- **Average CVSS:** 8.0
- **First CVE:** 2024-04-29
- **Latest CVE:** 2026-10-30
- **Ecosystems:** npm

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 47 |
| High | 77 |
| Medium | 27 |
| Low | 1 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-94](https://radicalnotion.ai/cwe/cwe-94) | Improper Control of Generation of Code ('Code Injection') | 18 |
| [CWE-918](https://radicalnotion.ai/cwe/cwe-918) | Server-Side Request Forgery (SSRF) | 12 |
| [CWE-862](https://radicalnotion.ai/cwe/cwe-862) | Missing Authorization | 12 |
| [CWE-639](https://radicalnotion.ai/cwe/cwe-639) | Authorization Bypass Through User-Controlled Key | 11 |
| [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 9 |
| [CWE-915](https://radicalnotion.ai/cwe/cwe-915) | Improperly Controlled Modification of Dynamically-Determined Object Attributes | 9 |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 7 |
| [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 6 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2024 | 10 |
| 2025 | 14 |
| 2026 | 128 |

## Affected versions (top 36 of 369)

| Version | Kind | CVEs |
| --- | --- | --- |
| flowise-components@1.0.0 | exact | 144 |
| flowise-components@1.1.0 | exact | 144 |
| flowise-components@1.1.1 | exact | 144 |
| flowise-components@1.2.1 | exact | 144 |
| flowise-components@1.2.10 | exact | 144 |
| flowise-components@1.2.12 | exact | 144 |
| flowise-components@1.2.14 | exact | 144 |
| flowise-components@1.2.15 | exact | 144 |
| flowise-components@1.2.16 | exact | 144 |
| flowise-components@1.2.17 | exact | 144 |
| flowise-components@1.2.2 | exact | 144 |
| flowise-components@1.2.3 | exact | 144 |
| \< 3.1.3 | range | 32 |
| \< 3.1.0 | range | 26 |
| \< 3.1.2 | range | 22 |
| \< 3.1.4 | range | 14 |
| \>= 3.1.4 | range | 14 |
| \<= 3.1.4 | range | 12 |
| \>= 3.1.3 | range | 10 |
| \< 3.0.13 | range | 8 |
| \<= 1.4.3 | range | 6 |
| \< 3.0.6 | range | 4 |
| \< 3.0.10 | range | 3 |
| \< 3.0.8 | range | 3 |
| 3.1.3 | patched | 33 |
| 3.1.0 | patched | 26 |
| 3.1.2 | patched | 18 |
| 3.1.4 | patched | 14 |
| 3.0.13 | patched | 8 |
| 3.0.6 | patched | 7 |
| 3.0.8 | patched | 5 |
| 3.0.10 | patched | 3 |
| 3.0.5 | patched | 2 |
| 1.8.1 | patched | 1 |
| 2.0.0 | patched | 1 |
| 2.1.1 | patched | 1 |

## CVEs (first 30 of 152, most severe first)

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-119978 | Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore | critical | 9.0 | No | No | Yes |
| CVE-2026-100610 | Flowise through 3.1.4 Missing Authorization via upsert-history | high | 7.7 | No | Yes | Yes |
| CVE-2026-100609 | Flowise through 3.1.4 Insecure Direct Object Reference via Credential | high | 7.6 | No | Yes | Yes |
| CVE-2026-100608 | Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard | high | 8.7 | No | Yes | Yes |
| CVE-2026-100607 | Flowise through 3.1.4 Authentication Bypass via Email-Only SSO | critical | 9.2 | No | Yes | Yes |
| CVE-2026-100606 | Flowise through 3.1.4 Authentication Bypass via SSO Email Match | critical | 9.2 | No | Yes | Yes |
| CVE-2026-100605 | Flowise through 3.1.4 Missing Authorization via Chat Message Routes | high | 7.5 | No | Yes | Yes |
| CVE-2026-91938 | Flowise before 3.1.4 Server-Side Request Forgery via document loaders | high | 7.6 | No | No | Yes |
| CVE-2026-91937 | Flowise before 3.1.4 NoSQL Injection via sessionId | high | 8.7 | No | No | Yes |
| CVE-2026-91936 | Flowise before 3.1.4 Script Injection via Docker Workflows | high | 8.3 | No | Yes | Yes |
| CVE-2026-91935 | Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes | high | 8.7 | No | Yes | Yes |
| CVE-2026-91934 | Flowise before 3.1.4 Remote Code Execution via SQL Database Chain | high | 8.7 | No | No | Yes |
| CVE-2026-91933 | Flowise before 3.1.4 Authorization Bypass via openai-realtime | high | 7.6 | No | No | Yes |
| CVE-2026-91932 | Flowise before 3.1.4 Remote Code Execution via cwd Parameter | critical | 9.0 | No | Yes | Yes |
| CVE-2026-91931 | Flowise before 3.1.4 Remote Code Execution via Custom MCP npx | critical | 9.0 | No | Yes | Yes |
| CVE-2026-91930 | Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover | high | 7.7 | No | Yes | Yes |
| CVE-2026-91929 | Flowise before 3.1.4 Cross-Tenant Authorization Bypass | high | 7.6 | No | No | Yes |
| CVE-2026-90580 | FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery | medium | 5.3 | No | Yes | Yes |
| CVE-2026-90535 | Flowise before 3.1.4 Denial of Service via text-to-speech/abort | medium | 6.3 | No | Yes | Yes |
| CVE-2026-90534 | Flowise before 3.1.4 Cross-Workspace Credential IDOR via node-load-method | medium | 6.1 | No | Yes | Yes |
| CVE-2026-90533 | Flowise before 3.1.4 Broken Access Control via organizationuser | medium | 6.0 | No | Yes | Yes |
| CVE-2026-52098 | - | critical | 9.8 | No | No | No |
| CVE-2026-73604 | Flowise before 3.1.3 Credential Exposure via API | high | 7.1 | No | Yes | Yes |
| CVE-2026-73603 | Flowise before 3.1.4 Credential Abuse via Text-to-Speech | medium | 6.3 | No | Yes | Yes |
| CVE-2026-73602 | Flowise before 3.1.3 Sandbox Escape to RCE | critical | 9.0 | No | Yes | Yes |
| CVE-2026-73601 | Flowise before 3.1.3 Remote Code Execution via Custom MCP | critical | 9.0 | No | No | Yes |
| CVE-2026-73488 | Flowise before 3.1.3 IDOR via customer-default-source endpoint | medium | 6.0 | No | Yes | Yes |
| CVE-2026-73487 | Flowise before 3.1.3 Prompt Injection RCE via CSV Agent | critical | 9.0 | No | Yes | Yes |
| CVE-2026-73486 | Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV | critical | 9.0 | No | Yes | Yes |
| CVE-2026-73485 | Flowise before 3.1.3 Remote Code Execution via Airtable Agent | critical | 9.0 | No | Yes | Yes |

## Frequently asked questions

### How many CVEs does FlowiseAI Flowise have?

FlowiseAI Flowise has 152 published CVE records since 2024.

### How many FlowiseAI Flowise CVEs are in CISA KEV?

None of FlowiseAI Flowise's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for FlowiseAI Flowise vulnerabilities?

Yes — 132 of FlowiseAI Flowise's CVEs have a known public exploit.

### Which versions of FlowiseAI Flowise are affected?

369 distinct FlowiseAI Flowise versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in FlowiseAI Flowise CVEs?

FlowiseAI Flowise's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-862 (Missing Authorization), CWE-639 (Authorization Bypass Through User-Controlled Key).

### How many critical FlowiseAI Flowise vulnerabilities are there?

FlowiseAI Flowise has 47 critical and 77 high-severity CVEs.

### What is the average severity of FlowiseAI Flowise CVEs?

The average CVSS base score across FlowiseAI Flowise's scored CVEs is 8.0.

## Other products from this vendor

- [flowise-components](https://radicalnotion.ai/vendor/flowiseai/flowise-components) (27 CVEs)
- [embed](https://radicalnotion.ai/vendor/flowiseai/embed) (1 CVEs)
- [FlowiseChatEmbed](https://radicalnotion.ai/vendor/flowiseai/flowisechatembed) (1 CVEs)
- [Flowise Cloud](https://radicalnotion.ai/vendor/flowiseai/flowise-cloud) (1 CVEs)
- [flowise-embed](https://radicalnotion.ai/vendor/flowiseai/flowise-embed) (1 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/flowiseai/flowise). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.