DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Flowise: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-08-31
Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um erweiterte Berechtigungen – einschließlich Administratorzugriff – zu erlangen, um beliebigen Code auszuführen, SQL-Injection durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-91938US | high7.1 | — | ||
Flowise versions before 3.1.4 contain a server-side request forgery vulnerability in Cheerio, Playwright, and Puppeteer document loader nodes that bypass SSRF protection. Attackers… | ||||
| CVE-2026-91937US | high7.5 | — | ||
Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within the MongoDBMemory node. Unauthenticated attackers can submit… | ||||
| CVE-2026-91936US | medium6.8 | — | ||
Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflow_dispatch inputs are directly interpolated into shell run block… | ||||
| CVE-2026-91935US | high8.3 | — | ||
Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create… | ||||
| CVE-2026-91934US | high8.8 | — | ||
Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary fi… | ||||
| CVE-2026-91933US | high7.1 | — | ||
Flowise before 3.1.4 fails to enforce workspace-level authorization checks in openai-realtime endpoints, allowing authenticated users to access tools from ChatFlows in other worksp… | ||||
| CVE-2026-91932US | — | — | ||
Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attackers remote code execution through an unvalidated cwd parame… | ||||
| CVE-2026-91931US | high8.5 | — | ||
Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package na… | ||||
| CVE-2026-91930US | high7.5 | — | ||
Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowing authenticated users to supply arbitrary organization IDs.… | ||||
| CVE-2026-91929US | high7.1OT erhöht | — | ||
Flowise versions before 3.1.4 contain cross-tenant authorization gaps in Enterprise endpoints that fail to verify resource ownership before operations. Attackers with Enterprise ac… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- GitHub Security Advisory GHSA-7x8x-vv46-4579 vom 2026-08-31external
- GitHub Security Advisory GHSA-9cvr-5wv9-2gxr vom 2026-08-31external
- GitHub Security Advisory GHSA-gggp-6qmf-xwwc vom 2026-08-31external
- GitHub Security Advisory GHSA-hx55-h48h-7rw9 vom 2026-08-31external
- GitHub Security Advisory GHSA-jrcq-qjw5-xx5q vom 2026-08-31external
- GitHub Security Advisory GHSA-pprx-4prj-35mj vom 2026-08-31external
- GitHub Security Advisory GHSA-pwfj-wh95-7mwp vom 2026-08-31external
- GitHub Security Advisory GHSA-vcwp-f9rq-3887 vom 2026-08-31external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan