Known vulnerabilities in Flowise - page 6

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 130
Public exploits: 5
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 130 known vulnerabilities: 18 high, 77 medium, 35 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129619 - Eval Injection
CVE-2025-55346
CWE-95 High
No
No
2.2.8 04.05.2026 SB2025040767
#VU129618 - Improper Access Control
CVE-2025-71336
CWE-284 High
No
No
3.0.6 04.05.2026 SB2026050499
#VU129616 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-71334
CWE-22 High
No
No
3.0.6 04.05.2026 SB2026050499
#VU129617 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 High
No
No
3.0.6 04.05.2026 SB2026050499
#VU129615 - Improper Access Control
CVE-2025-71327
CWE-284 Medium
No
No
3.0.2 04.05.2026 SB2026050498
#VU126610 - Unrestricted Upload of File with Dangerous Type
CVE-2026-41269
CWE-434 Low
No
No
3.1.0 20.04.2026 SB20260415153
#VU126608 - Server-Side Request Forgery (SSRF)
CVE-2026-41270
CWE-918 Low
No
No
3.1.0 20.04.2026 SB20260415153
#VU126606 - Server-Side Request Forgery (SSRF)
CVE-2026-41272
CWE-918 Low
No
No
3.1.0 20.04.2026 SB20260415153
#VU125536 - Unverified Password Change
CVE-2025-71328
CWE-620 Medium
No
No
3.0.10 09.04.2026 SB2026040909
#VU125535 - Unverified Password Change
CVE-2025-71337
CWE-620 Medium
No
No
3.0.10 09.04.2026 SB2026040909
#VU125534 - Insufficient Session Expiration
CVE-2025-71335
CWE-613 Medium
No
No
3.0.10 09.04.2026 SB2026040909
#VU125533 - Incorrect Authorization
CVE-2026-30820
CWE-863 Medium
No
No
3.0.13 09.04.2026 SB2026040908
#VU125532 - Unrestricted Upload of File with Dangerous Type
CVE-2026-30821
CWE-434 Medium
No
No
3.0.13 09.04.2026 SB2026040908
#VU125531 - Server-Side Request Forgery (SSRF)
CVE-2026-31829
CWE-918 Low
No
No
3.0.13 09.04.2026 SB2026040908
#VU125530 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-30822
CWE-915 Medium
No
No
3.0.13 09.04.2026 SB2026040908
#VU125529 - Authorization Bypass Through User-Controlled Key
CVE-2026-30823
CWE-639 Medium
No
No
3.1.4 09.04.2026 SB2026040908
#VU125528 - Use of Password Hash With Insufficient Computational Effort
CVE-2026-56272
CWE-916 Low
No
No
3.0.13 09.04.2026 SB2026040908
#VU125527 - Missing Authentication for Critical Function
CVE-2026-30824
CWE-306 High
Available
No
3.0.13 09.04.2026 SB2026040908
#VU125526 - Exposure of sensitive information to an unauthorized actor
CVE-2026-56267
CWE-200 Medium
No
No
3.0.13 09.04.2026 SB2026040908
#VU129623 - Unrestricted Upload of File with Dangerous Type
CVE-2025-71333
CWE-434 High
No
No
2.2.5 13.03.2025 SB2025031350


Showing elements 101 - 120 out of 130