Known vulnerabilities in Flowise - page 3

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 133
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 133 known vulnerabilities: 20 high, 77 medium, 36 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140084 - Improper Access Control
CVE-2026-70478
CWE-284 High
No
No
3.1.3 30.07.2026 SB20260727343
#VU140083 - Missing Authorization
CVE-2026-70471
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140082 - Authorization Bypass Through User-Controlled Key
CVE-2026-70476
CWE-639 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140081 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-69258
CWE-915 High
No
No
3.1.3 30.07.2026 SB20260727343
#VU140080 - Authorization Bypass Through User-Controlled Key
CVE-2026-69250
CWE-639 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140079 - Missing Authorization
CVE-2026-70473
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140078 - Missing Authorization
CVE-2026-70475
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140077 - Incomplete List of Disallowed Inputs
CVE-2025-8943
CWE-184 Medium
Available
Exploited
3.1.3 30.07.2026 SB20260727343
#VU140076 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-69254
CWE-94 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140075 - Server-Side Request Forgery (SSRF)
CVE-2026-69257
CWE-918 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140074 - Eval Injection
CVE-2026-73602
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140073 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-69256
CWE-94 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140072 - Eval Injection
CVE-2026-69253
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU131699 - Missing Authorization
CVE-2026-46444
CWE-862 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131698 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46475
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131697 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46476
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131696 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46478
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131695 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46477
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131694 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46479
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131693 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46480
CWE-915 Medium
No
No
3.1.2 18.05.2026 SB2026051873


Showing elements 41 - 60 out of 133