The vulnerability is a mass-assignment flaw in Flowise’s dataset create and update functions that allows a user from one workspace to add or modify datasets belonging to another workspace. Attackers can thereby take control of datasets that they do not own, compromising the integrity and confidentiality of data in other workspaces.

All installations of FlowiseAI:Flowise running a version prior to 3.1.2 are affected. The flaw applies to any configuration that exposes the dataset API to users from multiple workspaces, regardless of the number of users in the environment.

The CVSS score of 7.7 classifies this flaw as high severity. No EPSS data is available, and it is not listed in CISA KEV. Based on the description, it is inferred that the attack vector is the web or API endpoints that handle dataset creation and updates. An authenticated attacker with valid credentials in their own workspace can invoke these endpoints, supply a dataset identifier from another workspace, and persist changes, effectively taking over that dataset. The exploit requires authenticated access and the absence of proper workspace validation in the request handling.