Known vulnerabilities in Flowise - page 2

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 133
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 133 known vulnerabilities: 20 high, 77 medium, 36 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140069 - Missing Authorization
CVE-2026-70474
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140070 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140071 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140068 - Incorrect Authorization
CVE-2026-70472
CWE-863 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140067 - Eval Injection
CVE-2026-73601
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140066 - Improper Access Control
CVE-2026-69251
CWE-284 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140065 - Incomplete List of Disallowed Inputs
CVE-2026-70470
CWE-184 High
No
No
3.1.3 30.07.2026 SB20260727343
#VU140064 - Improper input validation
CVE-2026-73487
CWE-20 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140062 - Missing Authorization
CVE-2026-69252
CWE-862 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140061 - Incorrect Authorization
CVE-2026-69262
CWE-863 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140060 - Improper input validation
CVE-2026-73486
CWE-20 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140059 - Improper input validation
CVE-2026-73485
CWE-20 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140058 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-70477
CWE-74 High
No
No
3.1.3 30.07.2026 SB20260727343
#VU140057 - Improper Access Control
CVE-2026-69259
CWE-284 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140056 - Eval Injection
CVE-2026-69264
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140055 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-69255
CWE-94 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140054 - Incomplete List of Disallowed Inputs
CVE-2026-73484
CWE-184 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140052 - Improper Access Control
CVE-2026-73483
CWE-284 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140053 - Improper Access Control
CWE-284 Low
No
No
3.1.3 30.07.2026 SB20260727343


Showing elements 21 - 40 out of 133