Known vulnerabilities in Flowise - page 2

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 130
Public exploits: 5
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 130 known vulnerabilities: 18 high, 77 medium, 35 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146553 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-91936
CWE-78 Low
No
No
3.1.4 01.09.2026 SB2026083134
#VU146552 - Server-Side Request Forgery (SSRF)
CVE-2026-91935
CWE-918 Low
No
No
3.1.4 01.09.2026 SB2026083134
#VU146550 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-91934
CWE-22 Medium
No
No
3.1.4 01.09.2026 SB2026083134
#VU146551 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
3.1.4 01.09.2026 SB2026083134
#VU146549 - Authorization Bypass Through User-Controlled Key
CVE-2026-91933
CWE-639 Medium
No
No
3.1.4 01.09.2026 SB2026083134
#VU146548 - Improper input validation
CVE-2026-91932
CWE-20 Medium
No
No
3.1.4 01.09.2026 SB2026083134
#VU146547 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-91931
CWE-78 Medium
No
No
3.1.4 01.09.2026 SB2026083134
#VU146546 - Authorization Bypass Through User-Controlled Key
CVE-2026-91930
CWE-639 Medium
No
No
3.1.4 01.09.2026 SB2026083134
#VU146337 - Missing Authorization
CVE-2026-90535
CWE-862 Medium
No
No
3.1.4 31.08.2026 SB2026083134
#VU146336 - Authorization Bypass Through User-Controlled Key
CVE-2026-90534
CWE-639 Medium
No
No
3.1.4 31.08.2026 SB2026083134
#VU146335 - Missing Authorization
CVE-2026-90533
CWE-862 Low
No
No
3.1.4 31.08.2026 SB2026083134
#VU129624 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41138
CWE-94 Medium
No
No
3.1.0 04.05.2026 SB2026050496
#VU129621 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41137
CWE-94 Medium
No
No
3.1.0 04.05.2026 SB2026050496
#VU129613 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-41267
CWE-915 High
No
No
3.1.0 04.05.2026 SB2026050496
#VU129612 - Missing Authorization
CVE-2026-41266
CWE-862 High
No
No
3.1.0 04.05.2026 SB2026050496
#VU129611 - Improper Access Control
CVE-2026-41268
CWE-284 Medium
No
No
3.1.0 04.05.2026 SB2026050496
#VU125541 - Unrestricted Upload of File with Dangerous Type
CVE-2025-26319
CWE-434 Medium
No
No
3.0.8 09.04.2026 SB2026040910
#VU125537 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-61913
CWE-22 Medium
No
No
3.0.8 09.04.2026 SB2026040910
#VU96579 - Improper Authentication
CVE-2024-8181
CWE-287 Medium
No
No
- 28.08.2024 SB2024082819
#VU96578 - Improper input validation
CVE-2024-8182
CWE-20 Medium
No
No
- 28.08.2024 SB2024082819


Showing elements 21 - 40 out of 130