A mass‑assignment flaw in the evaluator create and update endpoints allows an attacker to move an evaluator from one workspace to another, effectively hijacking control of that workspace and enabling the attacker to run arbitrary workflows or displace legitimate users.

FlowiseAI’s Flowise platform is affected, specifically all deployments running any version older than 3.1.2.

The CVSS score of 7.7 indicates a moderate‑to‑high severity, while the EPSS score is not available and it is not listed in CISA KEV. The likely attack vector involves an authenticated user who can create or update evaluators; by exploiting the mass‑assignment issue, that user can transfer evaluators across workspaces and obtain elevated privileges.