Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:flowise:flowise:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authorization Bypass in Flowise Chat Message Endpoints

Flowise versions up to 3.1.4 are vulnerable to unauthorized access due to missing route-level RBAC checks, allowing low-privileged API keys to read and delete sensitive chat history.

Flowise authorization-bypass api-security rbac authentication-bypass identity-management sso idor data-exfiltration
1r 4t 1c