Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-69258: Flowise lets anyone alter chat flow data
CVE-2026-69258 · published 3 months ago
Summary
The public prediction API in Flowise versions before 3.1.3 accepted custom settings without checking the caller’s identity. This let anyone send specially crafted requests to change internal values such as chat identifiers and conversation history, potentially influencing how the chat flow behaves. Upgrade to Flowise 3.1.3 or later to stop the unauthenticated modifications.
What to do
- Update henryheng flowise to version 3.1.3.
- Update flowiseai flowise to version 3.1.3 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | flowiseai | flowise | < 3.1.3 |
| npm | henryheng | flowise |
<= 3.1.2 Fix: upgrade to 3.1.3
|
Original advisory text
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the unauthenticated POST /api/v1/prediction/:id endpoint accepted an overrideConfig object and unconditionally spread it into internal flowConfig and flowData objects in packages/server/src/utils/buildChatflow.ts and packages/server/src/utils/index.ts without checking apiOverrideStatus. This allowed unauthenticated attackers to inject arbitrary properties into the flow execution context of any public chatflow, overwrite values such as chatId, sessionId, and chatHistory, and control values resolved through $flow.* template variables consumed by flow nodes. This issue is fixed in version 3.1.3.
References
- https://github.com/FlowiseAI/Flowise/releases/tag/[email protected] URL
- https://github.com/FlowiseAI/Flowise/commit/23b997ee5ef9e269b628bad0f56f1ecb86bd... Patch
- https://github.com/FlowiseAI/Flowise/pull/6279 Patch
- https://github.com/advisories/GHSA-6vh2-wg4h-4vwj
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69258... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-69258 Vendor Advisory
- https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6vh2-wg4h-4vwj Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
8.6
High
Type
CWE-639Authorization Bypass Through User-Controlled Key
CWE-915Improperly Controlled Modification of Dynamically-Determined Object Attributes
Timeline
Published4 Aug 2026
Updated4 Nov 2026
First seen4 Aug 2026
Track software like this
Free during beta