CVE-2026-46444 Flowise: Vector Store No Permission Checks

High 8.7 Published 8 Jun 2026 Updated 8 Jun 2026

Attackers can perform unauthorized CRUD operations on OpenAI Assistants Vector Stores due to missing permission checks in Flowise.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-46444?

CVE-2026-46444 is a high-severity missing authorization vulnerability in Flowiseai Flowise, published on 8 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRUD endpoints for OpenAI Assistants Vector Store have no authentication middleware and the route path /api/v1/openai-assistants-vector-store is not in WHITELIST_URLS. However, it is also not protected by the main auth middleware when accessed via API key — the route requires API key auth (not whitelisted), but no permission checks exist on any operation. This issue has been patched in version 3.1.2.

Weakness: CWE-862

Which versions are affected by CVE-2026-46444?

2 open source packages ship an affected version, including flowise. It affects 1 product.

Package	Affected	Fixed in
`flowise` npm	All versions	`3.1.2`
`flowise` npm	All versions	`3.1.2`

Products include Flowiseai Flowise.

How do I fix CVE-2026-46444?

Upgrade flowise to 3.1.2 or later.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2026-46444 being exploited?

There is no known exploitation of CVE-2026-46444 in the wild and no public exploit code.

All Flowiseai Flowise vulnerabilities

Sources

Also known as GHSA-hmg2-jjjx-jcp2.