FlowiseAI kayıtları

flowiseai üreticisine ait 128 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 4 · %3,1
Pre-auth RCE: 15
Düzeltme kaydı olan: %82,8
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

128 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
66Bu hafta	CVE-2025-59528Silahlaştırılmış	Flowise has Remote Code Execution vulnerabilityflowiseai · flowise · CWE-94 pre-auth RCE	Kritik10,0	—	%86,2	22 Eyl 2025
61Bu hafta	CVE-2025-8943Silahlaştırılmış	Unsupervised OS command execution leads to remote code execution by unauthenticated network attackersflowiseai · flowise · CWE-306 pre-auth RCE Kimlik doğrulama atlatma	Kritik9,8	—	%74,8	14 Ağu 2025
56Planlayın	CVE-2025-26319Kavram kanıtı	FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.flowiseai · flowise · CWE-434 Kimlik doğrulamasız Dosya yükleme	Kritik9,8	—	%55,9	4 Mar 2025
54Planlayın	CVE-2025-58434Kavram kanıtı	Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeoverflowiseai · flowise · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%49,9	12 Eyl 2025
48Planlayın	CVE-2024-31621Kavram kanıtı	An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 cflowiseai · flowise · CWE-94 RCE	Yüksek7,6	—	%59,9	29 Nis 2024
46Planlayın	CVE-2024-8181Kavram kanıtı	Flowise Authentication Bypassflowiseai · flowise · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,1	—	%45,1	27 Ağu 2024
43Planlayın	CVE-2025-61913İstismar yok	Flowise is vulnerable to arbitrary file read, arbitrary file writeflowiseai · flowise · CWE-22 RCE Yol geçişi	Kritik9,9	—	%13,0	8 Eki 2025
40Planlayın	CVE-2025-71338Kavram kanıtı	Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store APIflowiseai · flowise · CWE-73 pre-auth RCE Yol geçişi	Kritik10,0	—	%1,2	25 Haz 2026
39İzleyin	CVE-2026-40933İstismar yok	Flowise: Authenticated RCE Via MCP Adaptersflowiseai · flowise · CWE-78 RCE Komut enjeksiyonu	Kritik9,9	—	%1,3	21 Nis 2026
39İzleyin	CVE-2026-41268İstismar yok	Flowise: Flowise Parameter Override Bypass Remote Command Executionflowiseai · flowise · CWE-20 pre-auth RCE	Kritik9,8	—	%1,2	23 Nis 2026
39İzleyin	CVE-2026-52098İstismar yok	An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpointflowiseai · flowise · CWE-94 pre-auth RCE	Kritik9,8	—	%1,1	10 Eyl 2026
39İzleyin	CVE-2026-41267İstismar yok	Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Associationflowiseai · flowise · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%0,5	23 Nis 2026
38İzleyin	CVE-2025-61687İstismar yok	FlowiseAI/Flosise has File Upload vulnerabilityflowiseai · flowise · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%11,1	6 Eki 2025
38İzleyin	CVE-2025-71334Kavram kanıtı	Flowise - Arbitrary File Access via Missing Chat Flow ID Validationflowiseai · flowise · CWE-73 pre-auth RCE Yol geçişi	Kritik9,3	—	%4,4	25 Haz 2026
38İzleyin	CVE-2026-46442Kavram kanıtı	Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escapeflowiseai · flowise · CWE-94 RCE	Kritik9,4	—	%3,4	8 Haz 2026
38İzleyin	CVE-2026-41137İstismar yok	Flowise: Code Injection in CSVAgent leads to Authenticated RCEflowiseai · flowise · CWE-94 RCE Komut enjeksiyonu	Kritik9,4	—	%2,1	23 Nis 2026
38İzleyin	CVE-2026-70470İstismar yok	Flowise: Pyodide validator Unicode homoglyph bypass leads to RCEflowiseai · flowise · CWE-184 pre-auth RCE	Kritik9,5	—	%1,0	4 Ağu 2026
38İzleyin	CVE-2026-70477İstismar yok	Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerabilityflowiseai · flowise · CWE-94 pre-auth RCE	Kritik9,5	—	%0,8	4 Ağu 2026
37İzleyin	CVE-2026-69251Kavram kanıtı	Flowise RCE via TypeORM DataSourceflowiseai · flowise · CWE-94 RCE	Kritik9,0	—	%2,7	4 Ağu 2026
37İzleyin	CVE-2025-71336İstismar yok	Flowise - Unsandboxed Remote Code Execution via Custom MCPflowiseai · flowise · CWE-78 pre-auth RCE Kimlik doğrulama atlatma Komut enjeksiyonu	Kritik9,3	—	%1,1	25 Haz 2026
37İzleyin	CVE-2026-69264İstismar yok	Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validationflowiseai · flowise · CWE-94 RCE	Kritik9,4	—	%1,1	4 Ağu 2026
37İzleyin	CVE-2026-69256İstismar yok	Flowise: Remote Code Execution Vulnerability in CSVAgentflowiseai · flowise · CWE-94 RCE Deserializasyon	Kritik9,4	—	%1,0	4 Ağu 2026
37İzleyin	CVE-2025-71333İstismar yok	Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpointflowiseai · flowise · CWE-73 pre-auth RCE Yol geçişi Dosya yükleme	Kritik9,3	—	%0,9	25 Haz 2026
37İzleyin	CVE-2026-69259İstismar yok	Flowise RCE via SQLite Record Manager Nodeflowiseai · flowise · CWE-94 RCE	Kritik9,4	—	%0,8	4 Ağu 2026
37İzleyin	CVE-2026-73483İstismar yok	Flowise before 3.1.3 Sandbox Escape via Puppeteerflowiseai · flowise · CWE-78 RCE Komut enjeksiyonu	Kritik9,4	—	%0,7	13 Ağu 2026

CVE-2025-59528
66Bu hafta
Flowise has Remote Code Execution vulnerability
KritikCVSS 10,0SilahlaştırılmışEPSS %86
- pre-auth RCE
flowiseai · flowise22 Eyl 2025
CVE-2025-8943
61Bu hafta
Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers
KritikCVSS 9,8SilahlaştırılmışEPSS %75
- pre-auth RCE
- Kimlik doğrulama atlatma
flowiseai · flowise14 Ağu 2025
CVE-2025-26319
56Planlayın
FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.
KritikCVSS 9,8Kavram kanıtıEPSS %56
- Kimlik doğrulamasız
- Dosya yükleme
flowiseai · flowise4 Mar 2025
CVE-2025-58434
54Planlayın
Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
KritikCVSS 9,8Kavram kanıtıEPSS %50
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
flowiseai · flowise12 Eyl 2025
CVE-2024-31621
48Planlayın
An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 c
YüksekCVSS 7,6Kavram kanıtıEPSS %60
- RCE
flowiseai · flowise29 Nis 2024
CVE-2024-8181
46Planlayın
Flowise Authentication Bypass
YüksekCVSS 8,1Kavram kanıtıEPSS %45
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
flowiseai · flowise27 Ağu 2024
CVE-2025-61913
43Planlayın
Flowise is vulnerable to arbitrary file read, arbitrary file write
KritikCVSS 9,9İstismar yokEPSS %13
- RCE
- Yol geçişi
flowiseai · flowise8 Eki 2025
CVE-2025-71338
40Planlayın
Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API
KritikCVSS 10,0Kavram kanıtıEPSS %1
- pre-auth RCE
- Yol geçişi
flowiseai · flowise25 Haz 2026
CVE-2026-40933
39İzleyin
Flowise: Authenticated RCE Via MCP Adapters
KritikCVSS 9,9İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
flowiseai · flowise21 Nis 2026
CVE-2026-41268
39İzleyin
Flowise: Flowise Parameter Override Bypass Remote Command Execution
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
flowiseai · flowise23 Nis 2026
CVE-2026-52098
39İzleyin
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
flowiseai · flowise10 Eyl 2026
CVE-2026-41267
39İzleyin
Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
flowiseai · flowise23 Nis 2026
CVE-2025-61687
38İzleyin
FlowiseAI/Flosise has File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %11
- RCE
- Dosya yükleme
flowiseai · flowise6 Eki 2025
CVE-2025-71334
38İzleyin
Flowise - Arbitrary File Access via Missing Chat Flow ID Validation
KritikCVSS 9,3Kavram kanıtıEPSS %4
- pre-auth RCE
- Yol geçişi
flowiseai · flowise25 Haz 2026
CVE-2026-46442
38İzleyin
Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape
KritikCVSS 9,4Kavram kanıtıEPSS %3
- RCE
flowiseai · flowise8 Haz 2026
CVE-2026-41137
38İzleyin
Flowise: Code Injection in CSVAgent leads to Authenticated RCE
KritikCVSS 9,4İstismar yokEPSS %2
- RCE
- Komut enjeksiyonu
flowiseai · flowise23 Nis 2026
CVE-2026-70470
38İzleyin
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
KritikCVSS 9,5İstismar yokEPSS %1
- pre-auth RCE
flowiseai · flowise4 Ağu 2026
CVE-2026-70477
38İzleyin
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
KritikCVSS 9,5İstismar yokEPSS %1
- pre-auth RCE
flowiseai · flowise4 Ağu 2026
CVE-2026-69251
37İzleyin
Flowise RCE via TypeORM DataSource
KritikCVSS 9,0Kavram kanıtıEPSS %3
- RCE
flowiseai · flowise4 Ağu 2026
CVE-2025-71336
37İzleyin
Flowise - Unsandboxed Remote Code Execution via Custom MCP
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Kimlik doğrulama atlatma
- Komut enjeksiyonu
flowiseai · flowise25 Haz 2026
CVE-2026-69264
37İzleyin
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
flowiseai · flowise4 Ağu 2026
CVE-2026-69256
37İzleyin
Flowise: Remote Code Execution Vulnerability in CSVAgent
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
- Deserializasyon
flowiseai · flowise4 Ağu 2026
CVE-2025-71333
37İzleyin
Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
- Dosya yükleme
flowiseai · flowise25 Haz 2026
CVE-2026-69259
37İzleyin
Flowise RCE via SQLite Record Manager Node
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
flowiseai · flowise4 Ağu 2026
CVE-2026-73483
37İzleyin
Flowise before 3.1.3 Sandbox Escape via Puppeteer
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
flowiseai · flowise13 Ağu 2026