Iniciar sesión
Deutsch English Español Polski
Media

Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting

  • Publicada: 25.09.2024
  • Actualizado: 11.10.2026 10:22

Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Paquete de npm flowise < 2.1.1 2.1.1
Paquete de npm flowise-embed < 2.0.0 2.0.0

Referencias

Puntuación CVSS 9.6/10
Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Debilidad (CWE)
CWE-79
Plataforma
npm
Paquete
flowise, flowise-embed
Publicada
25.09.2024
Actualizado
11.10.2026 10:22

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-m5p9-xvxj-64c8 - CC BY 4.0

Historial de vulnerabilidades: flowise

Todas las vulnerabilidades publicadas de este paquete (Paquete de npm), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (114) en el archivo
Entradas en total
114
Primera → última
04.2024 10.2026
Sin corrección
16
Explotada en ataques
0

Distribución por gravedad

  • Crítica 28
  • Alta 62
  • Media 24

Divulgaciones por año

Gravedad:
  1. Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting esta entrada
    Media · 9.6 CVE-2024-9148 < 2.1.1 2.1.1
  2. Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass
    Crítica CVE-2026-73487 < 3.1.3 3.1.3
  3. Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium
    Crítica CVE-2026-73483 < 3.1.3 3.1.3
  4. Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
    Crítica CVE-2026-70478 < 3.1.3 3.1.3
  5. Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
    Crítica CVE-2026-70477 < 3.1.3 3.1.3
  6. Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
    Alta CVE-2026-70476 < 3.1.3 3.1.3
  7. Flowise: Missing Authorization on Execution Update Endpoint
    Alta CVE-2026-70475 < 3.1.3 3.1.3
  8. Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
    Alta CVE-2026-70474 < 3.1.3 3.1.3
  9. Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
    Alta CVE-2026-70473 < 3.1.3 3.1.3
  10. Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
    Alta CVE-2026-70472 < 3.1.3 3.1.3
  11. Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
    Crítica CVE-2026-69264 < 3.1.3 3.1.3
  12. Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys
    Alta ghsa-88pr-878c-24wf < 3.1.3 3.1.3
  13. Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
    Alta CVE-2026-70471 < 3.1.3 3.1.3
  14. Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
    Crítica CVE-2026-70470 < 3.1.3 3.1.3
  15. Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
    Alta CVE-2026-69263 < 3.1.3 3.1.3
  16. Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
    Alta CVE-2026-69262 < 3.1.3 3.1.3
  17. Flowise RCE via SQLite Record Manager Node
    Crítica CVE-2026-69259 < 3.1.3 3.1.3
  18. Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
    Alta CVE-2026-69258 < 3.1.3 3.1.3
  19. Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
    Alta CVE-2026-69257 < 3.1.3 3.1.3
  20. Flowise: Remote Code Execution Vulnerability in CSVAgent
    Crítica CVE-2026-69256 < 3.1.3 3.1.3
  21. Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
    Crítica CVE-2026-69255 < 3.1.3 3.1.3
  22. Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
    Crítica CVE-2026-69254 < 3.1.3 3.1.3
  23. Flowise Sandbox Escape to RCE
    Crítica CVE-2026-69253 < 3.1.3 3.1.3
  24. Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
    Alta CVE-2026-69252 < 3.1.3 3.1.3
  25. Flowise RCE via TypeORM DataSource
    Crítica CVE-2026-69251 < 3.1.3 3.1.3
  26. Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
    Alta CVE-2026-69250 < 3.1.3 3.1.3
  27. FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover
    Alta · 8.8 CVE-2026-46480 < 3.1.2 3.1.2
  28. FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover
    Alta · 8.8 CVE-2026-46479 < 3.1.2 3.1.2
  29. FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover
    Alta · 8.8 CVE-2026-46478 < 3.1.2 3.1.2
  30. FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover
    Alta · 8.8 CVE-2026-46477 < 3.1.2 3.1.2
  31. FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover
    Alta CVE-2026-46476 < 3.1.2 3.1.2
  32. FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover
    Alta · 8.8 CVE-2026-46475 < 3.1.2 3.1.2
  33. FlowiseAI: Vector Store No Permission Checks
    Alta · 8.8 CVE-2026-46444 < 3.1.2 3.1.2
  34. FlowiseAI Vulnerable to Credential Data Leak
    Alta CVE-2026-46443 < 3.1.2 3.1.2
  35. FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape
    Crítica CVE-2026-46442 < 3.1.2 3.1.2
  36. FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment
    Alta CVE-2026-46441 < 3.1.2 3.1.2
  37. Flowise has an MCP Security Bypass that Enables RCE
    Alta CVE-2026-56274 < 3.1.2 3.1.2
  38. FlowiseAI Exposes Basic Auth Credentials via API
    Alta · 7.5 CVE-2026-46440 < 3.1.2 3.1.2
  39. FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment
    Alta CVE-2026-42863 < 3.1.2 3.1.2
  40. FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment
    Alta CVE-2026-42862 < 3.1.2 3.1.2
  41. FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment
    Alta CVE-2026-42861 < 3.1.2 3.1.2
  42. Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
    Crítica · 9.8 CVE-2026-41264 < 3.1.0 3.1.0
  43. Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability
    Crítica · 9.8 CVE-2026-41265 < 3.1.0 3.1.0
  44. Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials
    Alta · 7.5 CVE-2026-41279 < 3.1.0 3.1.0
  45. Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs
    Alta · 7.5 CVE-2026-41278 < 3.1.0 3.1.0
  46. Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)
    Alta · 8.8 CVE-2026-41277 < 3.1.0 3.1.0
  47. Flowise: resetPassword Authentication Bypass Vulnerability
    Alta · 9.8 CVE-2026-41276 < 3.1.0 3.1.0
  48. Flowise: Cypher Injection in GraphCypherQAChain
    Alta CVE-2026-41274 < 3.1.0 3.1.0
  49. Flowise: Password Reset Link Sent Over Unsecured HTTP
    Alta · 7.5 CVE-2026-41275 < 3.1.0 3.1.0
  50. Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise
    Alta · 8.2 CVE-2026-41273 < 3.1.0 3.1.0
  51. Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains
    Alta · 7.1 CVE-2026-41271 < 3.1.0 3.1.0
  52. Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)
    Alta · 7.1 CVE-2026-41272 < 3.1.0 3.1.0
  53. Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox
    Alta · 7.1 CVE-2026-41270 < 3.1.0 3.1.0
  54. Flowise: File Upload Validation Bypass in createAttachment
    Alta · 7.1 CVE-2026-41269 < 3.1.0 3.1.0
  55. Flowise: Parameter Override Bypass Remote Command Execution
    Alta · 7.7 CVE-2026-41268 < 3.1.0 3.1.0
  56. Flowise: Sensitive Data Leak in public-chatbotConfig
    Alta · 7.5 CVE-2026-41266 < 3.1.0 3.1.0
  57. Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association
    Alta · 8.1 CVE-2026-41267 < 3.1.0 3.1.0
  58. Flowise: Code Injection in CSVAgent leads to Authenticated RCE
    Crítica · 8.8 CVE-2026-41137 < 3.1.0 3.1.0
  59. Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`.
    Alta · 8.3 CVE-2026-41138 < 3.1.0 3.1.0
  60. Flowise: Authenticated RCE Via MCP Adapters
    Crítica · 9.9 CVE-2026-40933 < 3.1.0 3.1.0
  61. Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access
    Alta · 7.1 CVE-2026-31829 < 3.0.13 3.0.13
Mostrar más (20) Mostrando 61 de 91

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.