Description
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces variables:view. A user or API key that is denied variables:view can call /api/v1/node-custom-function and receive $vars pre-populated with all variables for the workspace, including Variable.name to Variable.value static variables and Variable.name to process.env[Variable.name] runtime variables. This can expose secrets such as database passwords, JWT secrets, SMTP passwords, and cloud keys, depending on the workspace Variables configuration. This issue is fixed in version 3.1.3.
Published: 2026-08-04
Score: 7.1 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows a user or API key without the variables:view permission to retrieve all workspace variables by calling the node custom function API. Because Flowise injects $vars into the sandbox unconditionally, the attacker gains access to static and runtime variables, potentially exposing secrets such as database passwords, JWT secrets and cloud keys. The weakness is a role‑based access control bypass, identified by CWE‑863, and the impact is a breach of confidentiality.

Affected Systems

FlowiseAI’s Flowise platform, versions prior to 3.1.3. The issue is fixed in version 3.1.3 and later.

Risk and Exploitability

The CVSS score of 7.1 indicates a moderate to high risk. No EPSS score is available, and the vulnerability is not listed in CISA KEV. The exploit can be carried out remotely by sending a request to /api/v1/node-custom-function. The attacker only needs to know the workspace identifier or have an API key that can reach the endpoint; no special privileges are required because the permission check is bypassed.

Generated by OpenCVE AI on August 4, 2026 at 19:36 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Flowise to version 3.1.3 or later.
  • Configure the environment to enforce that only users with the variables:view permission can access the /api/v1/node-custom-function endpoint, or add role checks before the call.
  • If an upgrade cannot be performed immediately, restrict access to the node custom function API to trusted users and consider disabling the endpoint until the fix is applied.

Generated by OpenCVE AI on August 4, 2026 at 19:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-8r8h-6vcc-xhrv Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
History

Tue, 04 Aug 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 04 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Flowiseai
Flowiseai flowise
Vendors & Products Flowiseai
Flowiseai flowise

Tue, 04 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Description Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces variables:view. A user or API key that is denied variables:view can call /api/v1/node-custom-function and receive $vars pre-populated with all variables for the workspace, including Variable.name to Variable.value static variables and Variable.name to process.env[Variable.name] runtime variables. This can expose secrets such as database passwords, JWT secrets, SMTP passwords, and cloud keys, depending on the workspace Variables configuration. This issue is fixed in version 3.1.3.
Title Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Weaknesses CWE-863
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Flowiseai Flowise
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-08-04T19:17:49.145Z

Reserved: 2026-08-04T15:24:41.339Z

Link: CVE-2026-70471

cve-icon Vulnrichment

Updated: 2026-08-04T19:17:11.949Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T20:00:04Z

Weaknesses