Known vulnerabilities in Flowise - page 6

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 133
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 133 known vulnerabilities: 20 high, 77 medium, 36 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126610 - Unrestricted Upload of File with Dangerous Type
CVE-2026-41269
CWE-434 Low
No
No
3.1.0 20.04.2026 SB20260415153
#VU126608 - Server-Side Request Forgery (SSRF)
CVE-2026-41270
CWE-918 Low
No
No
3.1.0 20.04.2026 SB20260415153
#VU126606 - Server-Side Request Forgery (SSRF)
CVE-2026-41272
CWE-918 Low
No
No
3.1.0 20.04.2026 SB20260415153
#VU126605 - Server-Side Request Forgery (SSRF)
CVE-2026-41271
CWE-918 Low
No
No
3.1.0 20.04.2026 SB20260415153
#VU126604 - Missing Authentication for Critical Function
CVE-2026-41273
CWE-306 High
No
No
3.1.0 20.04.2026 SB20260415153
#VU125543 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-57164
CWE-94 Low
No
No
3.0.6 09.04.2026 SB2026040911
#VU125542 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-71324
CWE-22 High
No
No
3.0.6 09.04.2026 SB2026040911
#VU125541 - Unrestricted Upload of File with Dangerous Type
CVE-2025-26319
CWE-434 Medium
No
No
3.0.8 09.04.2026 SB2026040910
#VU125540 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-59528
CWE-94 High
Available
Exploited
3.0.6 09.04.2026 SB2026040911
#VU125539 - Server-Side Request Forgery (SSRF)
CVE-2025-59527
CWE-918 Medium
No
No
3.0.6 09.04.2026 SB2026040911
#VU125538 - Improper Access Control
CVE-2025-58434
CWE-284 High
Available
No
3.0.6 09.04.2026 SB2026040911
#VU125537 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-61913
CWE-22 Medium
No
No
3.0.8 09.04.2026 SB2026040910
#VU125536 - Unverified Password Change
CVE-2025-71328
CWE-620 Medium
No
No
3.0.10 09.04.2026 SB2026040909
#VU125535 - Unverified Password Change
CVE-2025-71337
CWE-620 Medium
No
No
3.0.10 09.04.2026 SB2026040909
#VU125534 - Insufficient Session Expiration
CVE-2025-71335
CWE-613 Medium
No
No
3.0.10 09.04.2026 SB2026040909
#VU125530 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-30822
CWE-915 Medium
No
No
3.0.13 09.04.2026 SB2026040908
#VU125529 - Authorization Bypass Through User-Controlled Key
CVE-2026-30823
CWE-639 Medium
No
No
3.1.4 09.04.2026 SB2026040908
#VU125528 - Use of Password Hash With Insufficient Computational Effort
CVE-2026-56272
CWE-916 Low
No
No
3.0.13 09.04.2026 SB2026040908
#VU125527 - Missing Authentication for Critical Function
CVE-2026-30824
CWE-306 High
Available
No
3.0.13 09.04.2026 SB2026040908
#VU125526 - Exposure of sensitive information to an unauthorized actor
CVE-2026-56267
CWE-200 Medium
No
No
3.0.13 09.04.2026 SB2026040908


Showing elements 101 - 120 out of 133