Flowise instances that run a version prior to 3.0.6 have an arbitrary file read weakness in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The parameter is not validated and is passed directly to streamStorageFile(), where a fallback file‑lookup path that excludes the orgId is evaluated after a storage‑directory containment check. This allows an attacker to perform path traversal and read any file on the host that the kernel process can access, including sensitive files such as /root/.flowise/database.sqlite. Exposure of the database content would reveal all stored data. The flaw falls under CWE‑73 Path Traversal.

Vendors: Flowise. Product: Flowise. Affected versions: all releases older than 3.0.6.

The CVSS score of 8.7 indicates a high severity exploitation risk. Although no EPSS score is currently available and the vulnerability is not listed in the CISA KEV catalog, the flaw is exploitable by unauthenticated attackers through the publicly reachable HTTP endpoints. The lack of authentication and the parameter validation bug make the attack straightforward once the target is identified. The potential impact is the compromise of confidential database contents and the broader risk of further data exposure or subsequent attacks.