Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRUD endpoints for OpenAI Assistants Vector Store have no authentication middleware and the route path /api/v1/openai-assistants-vector-store is not in WHITELIST_URLS. However, it is also not protected by the main auth middleware when accessed via API key — the route requires API key auth (not whitelisted), but no permission checks exist on any operation. This issue has been patched in version 3.1.2.

According to its banner, the version of Flowise running on the remote host is < 3.1.2. It is, therefore, affected by multiple vulnerabilities :

- An hardcoded CORS wildcard on TTS endpoint enables abuse from any webpage

- An RCE through Flowise MCP

- A Mass Assignment in Chatflow Update Endpoint

- A Mass Assignment in Tool Update Endpoint

- A Mass Assignment in Assistant Update Endpoint

- A Mass Assignment in Variable Update Endpoint

- A Mass Assignment in PUT /api/v1/user

- An Authenticated Host RCE via POST /api/v1/node-custom-function

- A Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint

- A Credential Data Leak

- Vector Store No Permission Checks

- CustomTemplate create+update mass-assignment

- Assistant create+update mass-assignment allows cross-workspace assistant takeover

- DatasetRow create+update mass-assignment

- Dataset create+update mass-assignment

- Evaluation create+update mass-assignment

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version
    3.1.2, all CRUD endpoints for OpenAI Assistants Vector Store have no authentication middleware and the
    route path /api/v1/openai-assistants-vector-store is not in WHITELIST_URLS. However, it is also not
    protected by the main auth middleware when accessed via API key — the route requires API key auth (not
    whitelisted), but no permission checks exist on any operation. This issue has been patched in version
    3.1.2. (CVE-2026-46444)

ID	Name	Product	Family	Severity
115278	Flowise < 3.1.2 Multiples Vulnerabilities	Web App Scanning	Artificial Intelligence	critical
441878	SCA: security update for flowise (GHSA-hmg2-jjjx-jcp2)	Tenable Cloud Security	SCA Checks	high
441878	SCA: security update for flowise (GHSA-hmg2-jjjx-jcp2)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2026-46444

high

Tenable Plugins

critical

high

high