Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-store endpoints accept a client-controlled credential parameter and load credentials by id without checking whether that credential belongs to the caller workspace. Route permissions assistants:* only check feature access. The controller passes req.query.credential straight to the service, and the service uses findOneBy({ id: credentialId }), decrypts the credential, and calls OpenAI APIs without a workspaceId check. If an attacker knows another workspace credentialId, the attacker can use that workspace OpenAI key, read, modify, or delete victim vector stores and files, cause billing impact on the victim OpenAI account, and violate multi-tenant boundaries. This issue is fixed in version 3.1.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH: CVE-2026-70472 (CVSS 8.8) - Flowise LLM platform vulnerable to credential hijacking. Attackers can abuse API endpoints to steal OpenAI keys, access victim vector stores & cause billing fraud. Fixed in v3.1.3. Patch now! #CVE #Vulnerability #PatchNow https://t.co/U953hTr0DD
⚠️ HIGH — CVE-2026-70472 Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai… CVSS 7.1 Full analysis → https://sec.kaitan.id/cves/CVE-2026-70472 #OpenAI #CyberSecurity #InfoSec
Post summary
The post announces a high‑severity vulnerability (CVE‑2026‑70472) in Flowise before version 3.1.3, with a CVSS score of 7.1, and directs readers to a detailed analysis.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | flowiseai | flowise | - | - | - |