Auth bypass in Flowiseai Flowise
CVE-2026-100609
Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOneBy({ id: credentialId }) with no workspaceId condition) in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant (GET /api/v1/openai-assistants and /api/v1/openai-assistants/:id), uploadFilesToAssistant (POST /api/v1/openai-assistants-file/upload/), deleteAssistant (DELETE /api/v1/assistants/:id, reachable by first importing a poisoned assistant row via POST /api/v1/export-import/import), and the shared helper used by getVoices (GET /api/v1/text-to-speech/voices). An authenticated user of one workspace can supply a credential UUID belonging to another workspace, causing the server to decrypt and use that workspace's OpenAI or ElevenLabs API key on the attacker's behalf. No patched version was available at the time of publication.
Vulnerability class: IDOR (Insecure Direct Object Reference)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c (vendor-advisory)
- www.vulncheck.com/advisories/flowise-through-3.1.4-insecure-direct-object-refer… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-100609?
- CVE-2026-100609 is a medium-severity vulnerability in Flowiseai Flowise, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 6.8/10. Published 2026-09-26.
- How severe is CVE-2026-100609?
- Medium severity. CVSS v3 base score is 6.8 out of 10.