CVE-2025-71324Disclosure(flowiseai / flowise)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.

flowiseai CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

https://www.vulncheck.com/advisories/flowise-arbitrary-file-read-via-chatid-parameter

Weakness type (CWE)

CWE-73

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

flowise

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-06-25); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

flowiseai

Products

flowise

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

pdnuclei-bot@pdnuclei_bot48d
Disclosure
🚨 CVE-2025-71324 - high 🚨 Flowise - Path Traversal > Flowise < 3.0.6 contains a path traversal vulnerability caused by improper validation... 👾 https://cloud.projectdiscovery.io/library/CVE-2025-71324 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces a high‑severity path traversal vulnerability in Flowise versions below 3.0.6, linking to a ProjectDiscovery resource but providing no PoC, exploit, or patch details.
010102549
1.3K followersView on X
Kaitan ID Security@KaitanSecurity91d
Disclosure
⚠️ HIGH — CVE-2025-71324 Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-fi… CVSS 7.5 Full analysis → https://sec.kaitan.id/cves/CVE-2025-71324 #OpenAI #CyberSecurity #InfoSec
Post summary
The tweet alerts that Flowise versions prior to 3.0.6 suffer from an arbitrary file read flaw via the chatId parameter in the /api/v1/get-upload-fi endpoint, with CVSS 7.5, and references a full analysis link.
0000056
82 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	flowiseai	flowise	-	-	-

Explore more

Back to dashboard flowiseai CVEs flowise vulnerabilities