CVE-2025-71324

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf	Exploit Vendor Advisory
https://www.vulncheck.com/advisories/flowise-arbitrary-file-read-via-chatid-parameter	Third Party Advisory
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*

History

30 Sep 2026, 16:10

Type	Values Removed	Values Added
Summary		(es) Flowise anterior a la versión 3.0.6 contiene una vulnerabilidad de lectura arbitraria de archivos en el parámetro chatId de los endpoints /api/v1/get-upload-file y /api/v1/openai-assistants-file/download. El valor de chatId no se valida y se pasa a streamStorageFile(), donde una ruta de búsqueda de archivo de respaldo construida sin el orgId se evalúa después de la verificación de contención del directorio de almacenamiento, permitiendo el salto de ruta más allá del directorio de almacenamiento previsto. Atacantes no autenticados pueden leer archivos sensibles como /root/.flowise/database.sqlite, exponiendo todo el contenido de la base de datos en la configuración predeterminada.

Information

Published : 2026-06-25 22:16

Updated : 2026-10-12 21:10

NVD link : CVE-2025-71324

Mitre link : CVE-2025-71324

CVE.ORG link : CVE-2025-71324

JSON object : View

Products Affected

flowiseai

flowise

CWE

CWE-73

External Control of File Name or Path

{"id": "CVE-2025-71324", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-71324", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-30T03:31:46.632209Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Flowise", "product": "Flowise", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.6", "versionType": "semver"}, {"status": "unaffected", "version": "3.0.6", "versionType": "semver"}], "packageURL": "pkg:npm/flowise", "defaultStatus": "unaffected"}]}], "published": "2026-06-25T22:16:58.600", "references": [{"url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf", "tags": ["Exploit", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/flowise-arbitrary-file-read-via-chatid-parameter", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration."}, {"lang": "es", "value": "Flowise anterior a la versi\u00f3n 3.0.6 contiene una vulnerabilidad de lectura arbitraria de archivos en el par\u00e1metro chatId de los endpoints /api/v1/get-upload-file y /api/v1/openai-assistants-file/download. El valor de chatId no se valida y se pasa a streamStorageFile(), donde una ruta de b\u00fasqueda de archivo de respaldo construida sin el orgId se eval\u00faa despu\u00e9s de la verificaci\u00f3n de contenci\u00f3n del directorio de almacenamiento, permitiendo el salto de ruta m\u00e1s all\u00e1 del directorio de almacenamiento previsto. Atacantes no autenticados pueden leer archivos sensibles como /root/.flowise/database.sqlite, exponiendo todo el contenido de la base de datos en la configuraci\u00f3n predeterminada."}], "lastModified": "2026-10-12T21:10:00.227", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DE0B76C-5FFA-40E2-87E1-5C520E387AF0", "versionEndExcluding": "3.0.6"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}