CVE-2026-67622

Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownership verification. Attackers can enumerate cross-workspace assistant metadata, retrieve file and vector store listings, and upload files into victim workspaces by exploiting the missing workspace-scoped authorization check in the credential lookup logic.

CVSS v3 9.9 CRITICAL

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://flowiseai.com/sunset	Not Applicable
https://github.com/Caycon/cve-advisories/blob/main/2026/Flowise/CVE-2026-67622.md	Exploit Third Party Advisory
https://www.vulncheck.com/advisories/flowise-idor-in-openai-assistants-integration	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Flowise hasta la versión 3.1.4 contiene una vulnerabilidad de referencia directa a objeto insegura en la integración de OpenAI Assistants que permite a atacantes autenticados acceder a credenciales pertenecientes a otros espacios de trabajo al proporcionar un UUID de credencial arbitrario a los puntos finales de Assistants sin verificación de propiedad del espacio de trabajo. Los atacantes pueden enumerar metadatos de asistentes entre espacios de trabajo, recuperar listados de archivos y almacenes vectoriales, y cargar archivos en espacios de trabajo de víctimas al explotar la falta de una verificación de autorización con ámbito de espacio de trabajo en la lógica de búsqueda de credenciales.

Information

Published : 2026-08-06 22:18

Updated : 2026-10-24 16:10

NVD link : CVE-2026-67622

Mitre link : CVE-2026-67622

CVE.ORG link : CVE-2026-67622

JSON object : View

Products Affected

flowiseai

flowise

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-67622", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "disclosure@vulncheck.com"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-67622", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-07T16:16:38.198502Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/FlowiseAI/Flowise", "vendor": "FlowiseAI", "product": "Flowise", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.1.4"}], "packageURL": "pkg:github/FlowiseAI/Flowise", "defaultStatus": "affected"}]}], "published": "2026-08-06T22:18:22.873", "references": [{"url": "https://flowiseai.com/sunset", "tags": ["Not Applicable"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/Caycon/cve-advisories/blob/main/2026/Flowise/CVE-2026-67622.md", "tags": ["Exploit", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/flowise-idor-in-openai-assistants-integration", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownership verification. Attackers can enumerate cross-workspace assistant metadata, retrieve file and vector store listings, and upload files into victim workspaces by exploiting the missing workspace-scoped authorization check in the credential lookup logic."}, {"lang": "es", "value": "Flowise hasta la versi\u00f3n 3.1.4 contiene una vulnerabilidad de referencia directa a objeto insegura en la integraci\u00f3n de OpenAI Assistants que permite a atacantes autenticados acceder a credenciales pertenecientes a otros espacios de trabajo al proporcionar un UUID de credencial arbitrario a los puntos finales de Assistants sin verificaci\u00f3n de propiedad del espacio de trabajo. Los atacantes pueden enumerar metadatos de asistentes entre espacios de trabajo, recuperar listados de archivos y almacenes vectoriales, y cargar archivos en espacios de trabajo de v\u00edctimas al explotar la falta de una verificaci\u00f3n de autorizaci\u00f3n con \u00e1mbito de espacio de trabajo en la l\u00f3gica de b\u00fasqueda de credenciales."}], "lastModified": "2026-10-24T16:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B13DD07-EC62-44CC-8602-EEAE7960C9B3", "versionEndIncluding": "3.1.4"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}