CVE-2025-29189(flowiseai / flowise)

LOWCVSS 7.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Flowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.

flowiseai CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

flowise

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

flowiseai

Products

flowise

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

DFIR Lab@DFIR_Lab1d
🚨 HIGH SEVERITY: CVE-2025-29189 Flowise ≤ 2.2.3 vulnerable to SQL Injection via tableName parameter in Postgres_VectorStores. CVSS: 7.6 | CWE-89 Patch immediately if running affected versions. #CVE #Vulnerability #PatchNow https://t.co/RtbIvUxKqh
0000028
155 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	flowiseai	flowise	-	-	-

Explore more

Back to dashboard flowiseai CVEs flowise vulnerabilities