Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients (node-fetch, axios) instead of using the secured wrapper. These tools include (1) OpenAPIToolkit/OpenAPIToolkit.ts, (2) WebScraperTool/WebScraperTool.ts, (3) MCP/core.ts, and (4) Arxiv/core.ts. This vulnerability is fixed in 3.1.0.

According to its banner, the version of Flowise running on the remote host is < 3.1.0. It is, therefore, affected by multiple vulnerabilities :

- A Remote Code Execution Vulnerability through Airtable Agent

- A Cypher Injection in GraphCypherQAChain

- A Path Traversal in Vector Store basePath

- A Password Reset Link Sent Over Unsecured HTTP

- A resetPassword Authentication Bypass Vulnerability

- A Mass Assignment in DocumentStore Create Endpoint

- An SSRF Protection Bypass via Direct node-fetch

- A CSV Agent Prompt Injection Remote Code Execution Vulnerability

- A Sensitive Information Disclosure through public chatflow endpoints

- A Credit Abuse through an unauthenticated TTS endpoint

- An SSRF through Flowise Execute Flow

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0,
    multiple tool implementations directly import and invoke raw HTTP clients (node-fetch, axios) instead of
    using the secured wrapper. These tools include (1) OpenAPIToolkit/OpenAPIToolkit.ts, (2)
    WebScraperTool/WebScraperTool.ts, (3) MCP/core.ts, and (4) Arxiv/core.ts. This vulnerability is fixed in
    3.1.0. (CVE-2026-43995)

ID	Name	Product	Family	Severity
115279	Flowise < 3.1.0 Multiples Vulnerabilities	Web App Scanning	Artificial Intelligence	critical
441566	SCA: security update for flowise, flowise-components (GHSA-qqvm-66q4-vf5c)	Tenable Cloud Security	SCA Checks	medium
441566	SCA: security update for flowise, flowise-components (GHSA-qqvm-66q4-vf5c)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2026-43995

medium

Tenable Plugins

critical

medium

medium