Known vulnerabilities in Flowise - page 4

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 130
Public exploits: 5
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 130 known vulnerabilities: 18 high, 77 medium, 35 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140083 - Missing Authorization
CVE-2026-70471
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140082 - Authorization Bypass Through User-Controlled Key
CVE-2026-70476
CWE-639 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140081 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-69258
CWE-915 High
No
No
3.1.3 30.07.2026 SB20260727343
#VU140080 - Authorization Bypass Through User-Controlled Key
CVE-2026-69250
CWE-639 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140079 - Missing Authorization
CVE-2026-70473
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140078 - Missing Authorization
CVE-2026-70475
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140077 - Incomplete List of Disallowed Inputs
CVE-2025-8943
CWE-184 Medium
Available
Exploited
3.1.3 30.07.2026 SB20260727343
#VU140076 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-69254
CWE-94 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140075 - Server-Side Request Forgery (SSRF)
CVE-2026-69257
CWE-918 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140074 - Eval Injection
CVE-2026-73602
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140073 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-69256
CWE-94 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140072 - Eval Injection
CVE-2026-69253
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140069 - Missing Authorization
CVE-2026-70474
CWE-862 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140070 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140071 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140068 - Incorrect Authorization
CVE-2026-70472
CWE-863 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140067 - Eval Injection
CVE-2026-73601
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140066 - Improper Access Control
CVE-2026-69251
CWE-284 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140065 - Incomplete List of Disallowed Inputs
CVE-2026-70470
CWE-184 High
No
No
3.1.3 30.07.2026 SB20260727343
#VU140064 - Improper input validation
CVE-2026-73487
CWE-20 Medium
No
No
3.1.3 30.07.2026 SB20260727343


Showing elements 61 - 80 out of 130