Known vulnerabilities in Flowise - page 5

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 133
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 133 known vulnerabilities: 20 high, 77 medium, 36 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129624 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41138
CWE-94 Medium
No
No
3.1.0 04.05.2026 SB2026050496
#VU129621 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41137
CWE-94 Medium
No
No
3.1.0 04.05.2026 SB2026050496
#VU129613 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-41267
CWE-915 High
No
No
3.1.0 04.05.2026 SB2026050496
#VU129612 - Missing Authorization
CVE-2026-41266
CWE-862 High
No
No
3.1.0 04.05.2026 SB2026050496
#VU126602 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-41274
CWE-943 Medium
No
No
3.1.0 20.04.2026 SB20260415153
#VU126601 - Cleartext Transmission of Sensitive Information
CVE-2026-41275
CWE-319 Medium
No
No
3.1.0 20.04.2026 SB20260415153
#VU126600 - Improper Authentication
CVE-2026-41276
CWE-287 Medium
No
No
3.1.0 20.04.2026 SB20260415153
#VU126599 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-41277
CWE-915 Medium
No
No
3.1.0 20.04.2026 SB20260415153
#VU126598 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41264
CWE-94 High
Available
Exploited
3.1.0 20.04.2026 SB20260415153
#VU126597 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41265
CWE-94 High
No
No
3.1.0 20.04.2026 SB20260415153
#VU126596 - Exposure of sensitive information to an unauthorized actor
CVE-2026-41278
CWE-200 Medium
No
No
3.1.0 20.04.2026 SB20260415153
#VU126595 - Missing Authentication for Critical Function
CVE-2026-41279
CWE-306 Medium
No
No
3.1.0 20.04.2026 SB20260415153
#VU126240 - Missing Authentication for Critical Function
CVE-2026-56270
CWE-306 Medium
No
No
3.1.0 15.04.2026 SB20260415153
#VU126239 - Use of Hard-coded Cryptographic Key
CVE-2026-56271
CWE-321 Medium
No
No
3.1.0 15.04.2026 SB20260415153
#VU126238 - Use of Hard-coded Credentials
CVE-2026-56278
CWE-798 Medium
No
No
3.1.0 15.04.2026 SB20260415153
#VU126237 - Use of Hard-coded Credentials
CVE-2026-56269
CWE-798 Medium
No
No
3.1.0 15.04.2026 SB20260415153
#VU126236 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-40933
CWE-78 Medium
No
No
3.1.0 15.04.2026 SB20260415153
#VU126235 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-56273
CWE-22 Low
No
No
3.1.0 15.04.2026 SB20260415153
#VU126234 - Improper Access Control
CVE-2026-43995
CWE-284 Low
No
No
3.1.0 15.04.2026 SB20260415153
#VU126232 - Server-Side Request Forgery (SSRF)
CVE-2026-56275
CWE-918 Low
No
No
3.1.0 15.04.2026 SB20260415153


Showing elements 81 - 100 out of 133