🔐 Flowise Permission Flaw Enables Cross-Type Flow Deletion
Flowise administrators should upgrade to version 3.1.3 or later promptly, especially where deletion privileges are delegated to non-administrators. Review audit records for unexpected chatflow or agentflow deletions.
CVE-2026-69262 is an authorization flaw in Flowise before version 3.1.3. Users with permission to delete either chatflows or agentflows could delete the other resource type within the same workspace because the deletion logic did not validate the target type. The vulnerability is rated HIGH with CVSS 7.1.
🔗 Read more 🔗
Source: NVD
🚨 Flowise SQLite Path Override Leads to Root Command Execution
Patch internet-facing or multi-user Flowise deployments immediately, particularly installations using the published Docker image. Until upgraded, restrict flow-editing access and run the container with the least privileges practical.
CVE-2026-69259 is a critical code-execution vulnerability in the Flowise SQLite Record Manager node before version 3.1.3. An authenticated attacker could override the SQLite database path, write attacker-controlled content to sensitive locations, and trigger shell execution when Chromium started. The published Docker image ran as root, increasing the potential impact. The vulnerability is rated CRITICAL with CVSS 9.4.
🔗 Read more 🔗
Source: NVD
🧩 Public Flowise Chatflows Exposed to Configuration Injection
Upgrade public-facing Flowise instances to version 3.1.3 or later as a high priority. Review exposed chatflows and request logs for unusual overrideConfig values or manipulated session data.
CVE-2026-69258 affects Flowise before version 3.1.3 and allows unauthenticated configuration injection through the public prediction endpoint. Attackers could insert arbitrary properties into a public chatflow execution context and overwrite values including chatId, sessionId, chatHistory, and variables consumed by flow nodes. The vulnerability is rated HIGH with CVSS 8.8.
🔗 Read more 🔗
Source: NVD
🌐 Flowise IPv6 Parsing Bypass Opens the Door to SSRF
Patch Flowise systems that process user-controlled URLs or rely on untrusted DNS responses urgently. Cloud-hosted deployments deserve particular attention because reachable metadata endpoints may expose credentials or instance data.
CVE-2026-69257 is an SSRF protection bypass in Flowise before version 3.1.3. IPv4-mapped IPv6 addresses were not normalized before deny-list checks, allowing attacker-controlled DNS responses to direct requests toward localhost, internal services, or cloud metadata endpoints. Multiple Flowise components using its secure HTTP request functions are affected. The vulnerability is rated HIGH with CVSS 7.6.
🔗 Read more 🔗
Source: NVD
🐍 Flowise CSV Agent Pickle Bypass Enables Command Execution
Upgrade to Flowise version 3.1.3 or later immediately wherever users can edit chatflows. Until patched, disable or tightly restrict the CSV Agent and inspect saved flows for suspicious read_pickle usage.
CVE-2026-69256 is a critical code-execution vulnerability in the Flowise CSVAgent node before version 3.1.3. An authenticated user able to create or modify a chatflow could use pandas.read_pickle to deserialize a malicious payload, bypass the Python denylist, and execute commands through Pyodide. The vulnerability is rated CRITICAL with CVSS 9.4.
🔗 Read more 🔗
Source: NVD
💥 Flowise CSV Injection Executes Root Commands in Containers
Treat this as an emergency patch for shared Flowise installations and upgrade to version 3.1.3 or later immediately. Disable the CSV Agent and restrict flow-editing access until remediation is complete, then inspect affected containers for signs of compromise.
CVE-2026-69255 is a critical injection vulnerability in the Flowise CSVAgent component before version 3.1.3. An authenticated attacker could break out of a generated Python string, access Node.js child_process through the Pyodide JavaScript bridge, and execute arbitrary operating-system commands. Commands could run as root in the Flowise container. The vulnerability is rated CRITICAL with CVSS 9.2.
🔗 Read more 🔗
Source: NVD
📦 Flowise MCP Bypass Restores Automatic Package Execution
Flowise environments permitting Custom MCP server configuration should upgrade to version 3.1.3 or later urgently. Review MCP definitions and environment variables for npm_config_* entries, and limit who can create or modify server configurations.
CVE-2026-69263 is a mitigation bypass in Flowise before version 3.1.3 related to Custom MCP server launches. Attackers could set npm_config_yes=true to reproduce the blocked automatic-confirmation behavior of npx, causing it to install and execute a named package without using the prohibited flags. The issue bypasses protections introduced for CVE-2025-8943 and is rated HIGH with CVSS 8.7.
🔗 Read more 🔗
Source: NVD
🛡️ HPE SD-WAN Orchestrator Authentication Bypass Exposes Systems
Organizations running HPE Networking SD-WAN Orchestrator should apply the relevant security update immediately. Restrict REST API access to trusted management networks until patched and review logs for unauthenticated access or unexpected configuration changes.
CVE-2026-63456 is an authentication-bypass vulnerability in the REST API of HPE Networking SD-WAN Orchestrator. An unauthenticated remote attacker could access system functions and potentially view or modify sensitive information on the target. The vulnerability is rated CRITICAL with CVSS 9.8.
🔗 Read more 🔗
Source: NVD
🚪 Critical HPE SD-WAN REST API Flaw Bypasses Authentication
Patch affected HPE Networking SD-WAN Orchestrator deployments immediately, particularly management interfaces reachable from untrusted networks. Limit API exposure and inspect authentication and configuration logs for signs of unauthorized access.
CVE-2026-63455 affects the REST API interface of HPE Networking SD-WAN Orchestrator. A remote attacker without credentials could bypass web authentication, access system functions, and view or modify potentially sensitive information. The vulnerability is rated CRITICAL with CVSS 9.8.
🔗 Read more 🔗
Source: NVD