Flowise, a drag‑and‑drop interface for building AI workflows, contains a flaw where CRUD endpoints for OpenAI Assistants Vector Store lack permission checks. The route /api/v1/openai-assistants-vector-store is not protected by the main authentication middleware, even when accessed with an API key, and is not included in the whitelisting list. Based on the description, it is inferred that an attacker who obtains a valid API key can therefore create, read, update, or delete entries in the vector store without restriction, potentially compromising confidentiality and integrity of stored data. The weakness is classified as CWE‑862, a missing permission check.

The affected product is Flowise by FlowiseAI, all releases prior to version 3.1.2. No other versions are impacted once the update is applied.

The CVSS score of 8.7 indicates high severity. Although EPSS data is unavailable, it is inferred that the vulnerability can be exploited remotely if an attacker can acquire an API key. The CVE is not listed in CISA’s KEV catalog, but the presence of unprotected endpoints suggests a high likelihood of abuse in environments where API keys are distributed or logged. If the API key is compromised, an attacker could bypass all validation and manipulate the vector store freely.