Known vulnerabilities in Flowise - page 4

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 133
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 133 known vulnerabilities: 20 high, 77 medium, 36 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131712 - Insufficiently Protected Credentials
CVE-2026-46440
CWE-522 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131711 - Improper Access Control
CVE-2026-56277
CWE-284 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131708 - Improper Access Control
CVE-2026-56274
CWE-284 Medium
Available
Exploited
3.1.2 18.05.2026 SB2026051873
#VU131709 - Improper Access Control
CWE-284 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131710 - Improper input validation
CWE-20 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131707 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42863
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131706 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42862
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131705 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-46441
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131704 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-42861
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131703 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-56276
CWE-915 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131702 - Improper Access Control
CVE-2026-46442
CWE-284 Medium
No
No
3.1.2 18.05.2026 SB2026051873
#VU131701 - Incorrect Authorization
CVE-2026-56268
CWE-863 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU131700 - Exposure of sensitive information to an unauthorized actor
CVE-2026-46443
CWE-200 Low
No
No
3.1.2 18.05.2026 SB2026051873
#VU129620 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-50538
CWE-79 Medium
No
No
3.0.8 04.05.2026 SB2026050497
#VU129618 - Improper Access Control
CVE-2025-71336
CWE-284 High
No
No
3.0.6 04.05.2026 SB2026050499
#VU129616 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-71334
CWE-22 High
No
No
3.0.6 04.05.2026 SB2026050499
#VU129617 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 High
No
No
3.0.6 04.05.2026 SB2026050499
#VU129615 - Improper Access Control
CVE-2025-71327
CWE-284 Medium
No
No
3.0.2 04.05.2026 SB2026050498
#VU129614 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2025-71331
CWE-80 Medium
No
No
3.0.8 04.05.2026 SB2026050497
#VU129611 - Improper Access Control
CVE-2026-41268
CWE-284 Medium
No
No
3.1.0 04.05.2026 SB2026050496


Showing elements 61 - 80 out of 133