Flowise is a drag & drop interface for building large language model flows that includes an endpoint /api/v1/public-chatbotConfig/:id. Prior to version 3.1.0, this endpoint returns the entire configuration data, including API keys, HTTP authorization headers and password type fields, without requiring any authentication. Based on the description, it is inferred that an attacker who obtains or guesses a chatflow UUID can retrieve these credentials, leading to credential theft and potential further compromise.

The vulnerability affects all instances of Flowise running any version older than 3.1.0 that expose the public‑chatbotConfig endpoint. This includes every instance where the application has not been upgraded to the patched release.

The CVSS score of 7.7 indicates a high severity vulnerability, yet the EPSS score of 4% suggests a low probability of exploitation. The issue is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is an unauthenticated HTTP request to /api/v1/public-chatbotConfig/:id with a valid UUID, which reveals privileged information and facilitates credential theft.