Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30823 Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account t… https://www.cve.org/CVERecord?id=CVE-2026-30823
Post summary
A brief disclosure of an IDOR vulnerability in Flowise prior to version 3.0.13, potentially allowing account takeover, with no additional PoC, patch, or exploitation details provided.
🟠 CVE-2026-30823 - High Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise fe... https://www.thehackerwire.com/vulnerability/CVE-2026-30823/ https://t.co/QSGMcdFfIH
Post summary
A new CVE-2026-30823 is disclosed as an IDOR flaw in Flowise (before v3.0.13) that can lead to account takeover; no exploit code, PoC, or patch is provided.
CVE-2026-30823 Insecure Direct Object Reference (IDOR) in Flowise Prior to 3.0.13 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30823
Post summary
The post announces CVE-2026-30823, noting it is an Insecure Direct Object Reference flaw affecting Flowise versions before 3.0.13, with more details linked.
[CVE-2026-30823: HIGH] Flowise patched a critical IDOR vulnerability in version 3.0.13, preventing account takeover and enterprise feature bypass through SSO configurations. #cybersecurity#cve,CVE-2026-30823,#cybersecurity https://cvefind.com/CVE-2026-30823
Post summary
Flowise has patched CVE‑2026‑30823, mitigating an IDOR flaw that could allow account takeover and feature bypass via SSO – no exploitation or PoC details are disclosed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | flowiseai | flowise | - | - | - |