Flowiseai Flowise vulnerabilities
128 published vulnerabilities in Flowiseai Flowise. The most were published in 2026 (95), and 95 so far in 2026.
Flowiseai Flowise vulnerabilities by year
2024
2025
2026
Most exploited Flowiseai Flowise vulnerabilities
- CVE-2025-71338 Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API
- CVE-2026-40933 Flowise: Authenticated RCE Via MCP Adapters
- CVE-2025-61913 Flowise is vulnerable to arbitrary file read, arbitrary file write
- CVE-2025-59528 Flowise has Remote Code Execution vulnerability
- CVE-2026-52098 Code injection in n/a
- CVE-2025-58434 Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
- CVE-2025-8943 Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers
- CVE-2025-26319 FlowiseAI Flowise arbitrary file upload vulnerability
- CVE-2024-8181 Flowise Authentication Bypass
- CVE-2024-9148 Flowise Stored Cross-Site Scripting
- CVE-2026-70470 Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
- CVE-2026-70477 Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.