Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

Flowise allows attackers to read any file

CVE-2025-71324 · published 4 months ago
Summary

Versions of Flowise before 3.0.6 let anyone request a file without proper checks, so they can retrieve files outside the intended folder, such as the internal database file. This could expose sensitive information stored by Flowise. Update to the latest version or apply the vendor's patch to secure the file‑access endpoints.

What to do
  • Update henryheng flowise to version 3.0.6.
  • Update flowiseai flowise to version 3.0.6 or later.
Affected software
Ecosystem VendorProductAffected versions
npm henryheng flowise >= 3.0.5, < 3.0.6
Fix: upgrade to 3.0.6
– flowiseai flowise < 3.0.6
cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Original advisory text
Flowise has an Arbitrary File Read
Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
2% chance of attack within 30 days
Type
CWE-73External Control of File Name or Path
CWE-22Path Traversal
Timeline
Published25 Jun 2026
Updated3 Nov 2026
First seen25 Jun 2026
Sources
CVE-2025-71324 · NVD
GHSA-99pg-hqvx-r4gf · OSV
Track software like this
Free during beta