CVE-2026-70472Disclosure(flowiseai / flowise)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch flowiseai flowise systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-store endpoints accept a client-controlled credential parameter and load credentials by id without checking whether that credential belongs to the caller workspace. Route permissions assistants:* only check feature access. The controller passes req.query.credential straight to the service, and the service uses findOneBy({ id: credentialId }), decrypts the credential, and calls OpenAI APIs without a workspaceId check. If an attacker knows another workspace credentialId, the attacker can use that workspace OpenAI key, read, modify, or delete victim vector stores and files, cause billing impact on the victim OpenAI account, and violate multi-tenant boundaries. This issue is fixed in version 3.1.3.

flowiseai CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Vendor / third-party advisories

Other references

https://github.com/FlowiseAI/Flowise/releases/tag/[email protected]

Weakness type (CWE)

CWE-285CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

flowise

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-08-04); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

flowiseai

Products

flowise

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://sec.kaitan.id/cves/CVE-2026-70472

Classification over time

Date	Total	Labels

2026-08-04	1	Disclosure1
2026-09-14	1	Patch1

Full discourse2 posts

DFIR Lab@DFIR_Lab50d
Patch
🚨 HIGH: CVE-2026-70472 (CVSS 8.8) - Flowise LLM platform vulnerable to credential hijacking. Attackers can abuse API endpoints to steal OpenAI keys, access victim vector stores & cause billing fraud. Fixed in v3.1.3. Patch now! #CVE #Vulnerability #PatchNow https://t.co/U953hTr0DD
Post summary
The post announces a high-severity Flowise vulnerability involving credential hijacking and API abuse. Its primary actionable message is that the issue is fixed in version 3.1.3 and users should patch now.
0000071
135 followersView on X
Kaitan ID Security@KaitanSecurity91d
Disclosure
⚠️ HIGH — CVE-2026-70472 Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai… CVSS 7.1 Full analysis → https://sec.kaitan.id/cves/CVE-2026-70472 #OpenAI #CyberSecurity #InfoSec
Post summary
The post announces a high‑severity vulnerability (CVE‑2026‑70472) in Flowise before version 3.1.3, with a CVSS score of 7.1, and directs readers to a detailed analysis.
0000047
87 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	flowiseai	flowise	-	-	-

Explore more

Back to dashboard flowiseai CVEs flowise vulnerabilities