Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/routes/organization.route.ts and packages/server/src/enterprise/controllers/organization.controller.ts accept attacker-controlled Stripe subscriptionId values without verifying that the identifier belongs to the authenticated user's organization. An authenticated attacker can perform unauthorized Stripe subscription operations on other tenants, including changing subscription plans or modifying seat quantities, resulting in financial impact and service disruption. This issue is fixed in 3.1.3.
Published: 2026-08-04
Score: 8.3 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Flowise versions prior to 3.1.3 allow authenticated users to supply arbitrary Stripe subscriptionId values when calling organization‑billing endpoints without checking that the subscription belongs to their tenant. The flaw permits an attacker to change subscription plans, alter seat quantities, or otherwise perform Stripe operations on other tenants, causing direct financial damage and potential service disruption.

Affected Systems

The affected product is FlowiseAI Flowise. All releases before 3.1.3 are vulnerable; 3.1.3 and later include the fix.

Risk and Exploitability

The CVSS score of 8.3 indicates high severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, so the current exploitation probability is uncertain. An attacker must be an authenticated user in the system; from that race condition, they can manipulate other tenants’ billing by sending crafted requests to the existing endpoints.

Generated by OpenCVE AI on August 4, 2026 at 20:26 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the official Flowise patch to version 3.1.3 or newer.
  • Ensure that only authenticated users can reach the subscription‑management endpoints and that their session does not expose cross‑tenant privileges.
  • Implement server‑side validation that the provided Stripe subscriptionId belongs to the requesting organization before performing any Stripe operation.

Generated by OpenCVE AI on August 4, 2026 at 20:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-gmmw-qg98-6j6p Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
History

Wed, 05 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 04 Aug 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Flowiseai
Flowiseai flowise
Vendors & Products Flowiseai
Flowiseai flowise

Tue, 04 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Description Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/routes/organization.route.ts and packages/server/src/enterprise/controllers/organization.controller.ts accept attacker-controlled Stripe subscriptionId values without verifying that the identifier belongs to the authenticated user's organization. An authenticated attacker can perform unauthorized Stripe subscription operations on other tenants, including changing subscription plans or modifying seat quantities, resulting in financial impact and service disruption. This issue is fixed in 3.1.3.
Title Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Weaknesses CWE-284
CWE-639
References
Metrics cvssV4_0

{'score': 8.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Flowiseai Flowise
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-08-05T14:51:23.779Z

Reserved: 2026-08-04T15:24:41.339Z

Link: CVE-2026-70476

cve-icon Vulnrichment

Updated: 2026-08-05T14:51:20.888Z

cve-icon NVD

Status : Received

Published: 2026-08-04T20:16:54.330

Modified: 2026-08-05T16:17:02.177

Link: CVE-2026-70476

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T20:30:05Z

Weaknesses
  • CWE-284

    Improper Access Control

  • CWE-639

    Authorization Bypass Through User-Controlled Key