CVE-2026-70471

Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Published Aug 4, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Description

Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces variables:view. A user or API key that is denied variables:view can call /api/v1/node-custom-function and receive $vars pre-populated with all variables for the workspace, including Variable.name to Variable.value static variables and Variable.name to process.env[Variable.name] runtime variables. This can expose secrets such as database passwords, JWT secrets, SMTP passwords, and cloud keys, depending on the workspace Variables configuration. This issue is fixed in version 3.1.3.

Analysis

Technical impact

The vulnerability allows a user or API key without the variables:view permission to retrieve all workspace variables by calling the node custom function API. Because Flowise injects $vars into the sandbox unconditionally, the attacker gains access to static and runtime variables, potentially exposing secrets such as database passwords, JWT secrets and cloud keys. The weakness is a role‑based access control bypass, identified by CWE‑863, and the impact is a breach of confidentiality.

Affected Systems

FlowiseAI’s Flowise platform, versions prior to 3.1.3. The issue is fixed in version 3.1.3 and later.

Risk and Exploitability

The CVSS score of 7.1 indicates a moderate to high risk. No EPSS score is available, and the vulnerability is not listed in CISA KEV. The exploit can be carried out remotely by sending a request to /api/v1/node-custom-function. The attacker only needs to know the workspace identifier or have an API key that can reach the endpoint; no special privileges are required because the permission check is bypassed.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

FlowiseAI

Flowise

affected

Version	Status	Constraints
`< 3.1.3`	affected	—

Configuration 1 [-]

cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Flowiseai

Flowise

Version	Status	Scheme	Platform
`[0,3.1.3)`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Flowise to version 3.1.3 or later.
Configure the environment to enforce that only users with the variables:view permission can access the /api/v1/node-custom-function endpoint, or add role checks before the call.
If an upgrade cannot be performed immediately, restrict access to the node custom function API to trusted users and consider disabling the endpoint until the fix is applied.

Generated by OpenCVE AI on August 4, 2026 at 19:36 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-8r8h-6vcc-xhrv	Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.412% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8r8h-6vcc-xhrv

History

Sep 14, 2026 9:00 PM Affected versions updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:flowiseai:flowise::::::::
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}`

Aug 4, 2026 8:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 4, 2026 8:15 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Flowiseai Flowiseai flowise
Vendors & Products		Flowiseai Flowiseai flowise

Aug 4, 2026 6:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces variables:view. A user or API key that is denied variables:view can call /api/v1/node-custom-function and receive $vars pre-populated with all variables for the workspace, including Variable.name to Variable.value static variables and Variable.name to process.env[Variable.name] runtime variables. This can expose secrets such as database passwords, JWT secrets, SMTP passwords, and cloud keys, depending on the workspace Variables configuration. This issue is fixed in version 3.1.3.
Title		Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Weaknesses		CWE-863
References		https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8r8h-6vcc-xhrv
Metrics		cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}`