RCE in Flowiseai Flowise
CVE-2026-69251
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig i…
Vulnerability class: RCE (Remote Code Execution)
Affected products
- Flowiseai Flowise — versions < 3.1.3
- Flowiseai Flowise-components — versions < 3.1.3
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)