Known vulnerabilities in Flowise

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 130
Public exploits: 5
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 130 known vulnerabilities: 18 high, 77 medium, 35 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131712 - Insufficiently Protected Credentials
CVE-2026-46440
CWE-522 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131711 - Improper Access Control
CVE-2026-56277
CWE-284 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131708 - Improper Access Control
CVE-2026-56274
CWE-284 Medium
Available
Exploited
3.1.2 18.05.2026 SB2026051873
#VU131709 - Improper Access Control
CWE-284 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131710 - Improper input validation
CWE-20 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131707 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42863
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131706 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42862
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131705 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46441
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131704 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42861
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131703 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-56276
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131702 - Improper Access Control
CVE-2026-46442
CWE-284 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131701 - Incorrect Authorization
CVE-2026-56268
CWE-863 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131700 - Exposure of sensitive information to an unauthorized actor
CVE-2026-46443
CWE-200 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131699 - Missing Authorization
CVE-2026-46444
CWE-862 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131698 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46475
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131697 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46476
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131696 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46478
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131695 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46477
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131694 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46479
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131693 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46480
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873


Showing elements 1 - 20 out of 130