According to its banner, the version of Flowise running on the remote host is < 3.1.0. It is, therefore, affected by multiple vulnerabilities :

- A Remote Code Execution Vulnerability through Airtable Agent

- A Cypher Injection in GraphCypherQAChain

- A Path Traversal in Vector Store basePath

- A Password Reset Link Sent Over Unsecured HTTP

- A resetPassword Authentication Bypass Vulnerability

- A Mass Assignment in DocumentStore Create Endpoint

- An SSRF Protection Bypass via Direct node-fetch

- A CSV Agent Prompt Injection Remote Code Execution Vulnerability

- A Sensitive Information Disclosure through public chatflow endpoints

- A Credit Abuse through an unauthenticated TTS endpoint

- An SSRF through Flowise Execute Flow

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0,
    the specific flaw exists within the run method of the CSV_Agents class. The issue results from the lack of
    proper sandboxing when evaluating an LLM generated python script. An attacker can leverage this
    vulnerability to execute code in the context of the user running the server. Using prompt injection
    techniques, an unauthenticated attacker with the ability to send prompts to a chatflow using the CSV Agent
    node may convince an LLM to respond with a malicious python script that executes attacker controlled
    commands on the Flowise server. This vulnerability is fixed in 3.1.0. (CVE-2026-41264)

ID	Name	Product	Family	Published	Updated	Severity
115279	Flowise < 3.1.0 Multiples Vulnerabilities	Web App Scanning	Artificial Intelligence	7/3/2026	7/3/2026	critical
440681	SCA: security update for flowise, flowise-components (GHSA-3hjv-c53m-58jj)	Tenable Self-Hosted Container Security	SCA Checks	4/21/2026	7/6/2026	critical
440681	SCA: security update for flowise, flowise-components (GHSA-3hjv-c53m-58jj)	Tenable Cloud Security	SCA Checks	4/21/2026	7/6/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical