VulnSocial

CVE-2026-8027Disclosure(flowiseai / flowise)

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. This manipulation of the argument userId/organizationId/workspaceId/email causes authorization bypass. The attack may be initiated remotely. The affected component should be upgraded.

flowiseai CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-285CWE-639

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • flowise

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
flowiseai
Products
flowise

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-06: 205-06
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-8027 A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. T… https://www.cve.org/CVERecord?id=CVE-2026-8027 ----- Traducción: CVE-2026-8027 Se … http://infoflow.cloud`

    Post summary

    A new CVE (CVE-2026-8027) has been identified in FlowiseAI Flowise up to version 3.0.12, affecting an unknown functionality in the User Controller Handler, with no additional details on exploits, patches, or active use.

    0000135
    75 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-8027 A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. T… https://www.cve.org/CVERecord?id=CVE-2026-8027

    Post summary

    The text only notes the existence of CVE-2026-8027 in FlowiseAI Flowise and mentions an unknown component-related weakness, but provides no details on exploitation, patching, or technical characteristics.

    00000123
    57.4K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appflowiseaiflowise---

Explore more

Back to dashboardflowiseai CVEsflowise vulnerabilities