EDB-52557

PoC

Flowise < 3.0.5 - Missing Authentication for Critical Function

view exploit source exploit_dbtype webappsauthor andersoncezar048published 2026-05-13catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-58434US—OT elevatedExploit
Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive i…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan