{"answers":{"affected":"2 open source packages ship an affected version, including flowise. It affects 1 product.","exploited":"It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-58434 exists.","fix":"Upgrade flowise to 3.0.6 or later.","what":"CVE-2025-58434 is a critical vulnerability in Flowiseai Flowise, published on 12 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2025-58434 and fix it if it is affected.\n\nWhat it is: CVE-2025-58434 is a critical vulnerability in Flowiseai Flowise, published on 12 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-58434 exists.\n\nAffected packages and fixed versions:\n- flowise (npm): affected all versions; fixed in 3.0.6\n- flowise (npm): affected all versions; fixed in 3.0.6\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2025-58434/ (Markdown: https://insights.sbomify.com/CVE-2025-58434/index.md)","id":"CVE-2025-58434","markdown":"https://insights.sbomify.com/CVE-2025-58434/index.md","name":"CVE-2025-58434","record":{"aliases":["GHSA-wgpv-6j63-x5ph"],"analysis":{"component_type":"web_application","fix_type":"upgrade","impacts":["account_takeover","data_read"],"network_reachable":"yes","non_default_config":false,"product_category":"LLM flow builder","requires_auth":"none","summary":"Unauthenticated password reset token disclosure allows attackers to take over any user account in Flowise deployments.","user_interaction":"not_required","vuln_class":"information_disclosure"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[{"product":"flowise","vendor":"flowiseai"}],"cvss":{"score":9.8,"severity":"critical","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-306","name":"Missing Authentication for Critical Functionality"}],"description":"Flowise is a drag \u0026 drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO). This vulnerability applies to both the cloud service (`cloud.flowiseai.com`) and self-hosted/local Flowise deployments that expose the same API. Commit 9e178d68873eb876073846433a596590d3d9c863 in version 3.0.6 secures password reset endpoints. Several recommended remediation steps are available. Do not return reset tokens or sensitive account details in API responses. Tokens must only be delivered securely via the registered email channel. Ensure `forgot-password` responds with a generic success message regardless of input, to avoid user enumeration. Require strong validation of the `tempToken` (e.g., single-use, short expiry, tied to request origin, validated against email delivery). Apply the same fixes to both cloud and self-hosted/local deployments. Log and monitor password reset requests for suspicious activity. Consider multi-factor verification for sensitive accounts.","ecosystems":["npm"],"exploits":{"exploitdb":1,"first_seen":"2025-09-12","github_poc":16,"max_poc_stars":18,"metasploit":1,"nuclei":1,"refs":[{"date":"2026-04-13T01:54:37Z","kind":"github_poc","ref":"https://github.com/kartik2005221/CVE-2025-58434-AND-59528-POC","stars":18,"title":"Combined PoC for CVE-2025-28434 and CVE-2025-59528"},{"date":"2026-04-12T00:34:15Z","kind":"github_poc","ref":"https://github.com/AzureADTrent/CVE-2025-58434-59528","stars":5,"title":"CVE-2025-58434 and CVE-2025-59528 chain POC"},{"date":"2026-04-12T16:28:43Z","kind":"github_poc","ref":"https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf","stars":2,"title":"Exploitation Silentium HTB-CTF"},{"date":"2026-04-12T01:47:49Z","kind":"github_poc","ref":"https://github.com/CVETeam/FlowiseAI-Critical-KillChain","stars":1,"title":"Critical unauthenticated kill chain leading to full RCE in FlowiseAI (CVE-2025-58434 + CVE-2025-59528)"},{"date":"2026-04-12T16:52:28Z","kind":"github_poc","ref":"https://github.com/kartik2005221/CVE-2025-58434-poc","stars":1,"title":null},{"date":"2026-04-15T12:40:16Z","kind":"github_poc","ref":"https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset","stars":1,"title":"Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password endpoint to change any user's password without prior authentication. Includes a proof-of-concept script and mitigation guidelines."},{"date":"2026-04-20T09:52:46Z","kind":"github_poc","ref":"https://github.com/SteamPunk424/CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise","stars":1,"title":"The forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO)."},{"date":"2026-05-07T16:57:18Z","kind":"github_poc","ref":"https://github.com/0xDaeras/Flowise-CVE-2025-58434-Chain-59528","stars":1,"title":"FlowiseAI CVE-2025-58434 \u0026 CVE-2025-59528 exploit PoC, demonstrating unauthenticated ATO via reset token leakage, followed by authenticated RCE. Includes a reproductible Docker lab environment."}],"tier":"weaponised"},"has_fix":true,"headline":"Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover","id":"CVE-2025-58434","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"npm","product":"flowiseai:flowise","products":["flowiseai:flowise"],"type":"information_disclosure","year":"2025"},"n_packages":2,"n_references":2,"next":{"headline":"Open OnDemand didn't rotate password for VNC batch_connect","id":"CVE-2025-58435"},"packages":[{"ecosystem":"npm","fixed":["3.0.6"],"introduced":["0"],"last_affected":[],"package":"flowise","purl":null,"source":"GHSA-wgpv-6j63-x5ph"},{"ecosystem":"npm","fixed":["3.0.6"],"introduced":["0"],"last_affected":[],"package":"flowise","purl":"pkg:npm/flowise","source":"GHSA-wgpv-6j63-x5ph"}],"prev":{"headline":"ZimaOS Privilege Escalation using localhost calls to File API Upload","id":"CVE-2025-58432"},"products":["Flowise"],"published":"2025-09-12","related":[{"cvss_score":10,"headline":"Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API","id":"CVE-2025-71338","kev_date_added":null,"published":"2026-06-25"},{"cvss_score":10,"headline":"Flowise: Authenticated RCE Via MCP Adapters","id":"CVE-2026-40933","kev_date_added":null,"published":"2026-04-21"},{"cvss_score":10,"headline":"Flowise is vulnerable to arbitrary file read, arbitrary file write","id":"CVE-2025-61913","kev_date_added":null,"published":"2025-10-08"},{"cvss_score":10,"headline":"Flowise has Remote Code Execution vulnerability","id":"CVE-2025-59528","kev_date_added":null,"published":"2025-09-22"},{"cvss_score":9.8,"headline":"Code injection in n/a","id":"CVE-2026-52098","kev_date_added":null,"published":"2026-09-10"},{"cvss_score":9.8,"headline":"Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers","id":"CVE-2025-8943","kev_date_added":null,"published":"2025-08-14"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"},{"class":"open","licence":"CC0","name":"PoC-in-GitHub"}],"ssvc":{"automatable":"yes","exploitation":"poc","technical_impact":"total"},"state":"PUBLISHED","updated":"2025-09-15","vendors":["FlowiseAI"]},"summary":"Unauthenticated password reset token disclosure allows attackers to take over any user account in Flowise deployments.","url":"https://insights.sbomify.com/CVE-2025-58434/"}