CVE-2026-71962

Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attackers to access private files by exploiting the endpoint's inclusion in the global authentication whitelist, which bypasses all session and API key verification. Attackers can supply valid chatflowId, chatId, and fileName identifiers to retrieve files from any chatflow on the instance, including private chatflows belonging to other workspaces or organizations.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://flowiseai.com/sunset	Not Applicable
https://gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649?utm_source=chatgpt.com	Exploit Mitigation Third Party Advisory
https://www.vulncheck.com/advisories/flowise-missing-authorization-via-openai-assistants-file-download	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Las versiones de Flowise 2.2.4 a 3.1.4 contienen una vulnerabilidad de autorización faltante en el endpoint POST /api/v1/openai-assistants-file/download que permite a atacantes no autenticados acceder a archivos privados al explotar la inclusión del endpoint en la lista blanca de autenticación global, lo que omite toda verificación de sesión y clave API. Los atacantes pueden proporcionar identificadores válidos de chatflowId, chatId y fileName para recuperar archivos de cualquier chatflow en la instancia, incluyendo chatflows privados pertenecientes a otros espacios de trabajo u organizaciones.

Information

Published : 2026-08-10 19:17

Updated : 2026-10-24 15:10

NVD link : CVE-2026-71962

Mitre link : CVE-2026-71962

CVE.ORG link : CVE-2026-71962

JSON object : View

Products Affected

flowiseai

flowise

CWE

CWE-862

Missing Authorization

{"id": "CVE-2026-71962", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71962", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-10T18:39:45.922226Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/FlowiseAI/Flowise", "vendor": "FlowiseAI", "product": "Flowise", "versions": [{"status": "affected", "version": "2.2.4", "versionType": "semver", "lessThanOrEqual": "3.1.4"}], "packageURL": "pkg:github/FlowiseAI/Flowise", "defaultStatus": "affected"}]}], "published": "2026-08-10T19:17:31.400", "references": [{"url": "https://flowiseai.com/sunset", "tags": ["Not Applicable"], "source": "disclosure@vulncheck.com"}, {"url": "https://gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649?utm_source=chatgpt.com", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/flowise-missing-authorization-via-openai-assistants-file-download", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attackers to access private files by exploiting the endpoint's inclusion in the global authentication whitelist, which bypasses all session and API key verification. Attackers can supply valid chatflowId, chatId, and fileName identifiers to retrieve files from any chatflow on the instance, including private chatflows belonging to other workspaces or organizations."}, {"lang": "es", "value": "Las versiones de Flowise 2.2.4 a 3.1.4 contienen una vulnerabilidad de autorizaci\u00f3n faltante en el endpoint POST /api/v1/openai-assistants-file/download que permite a atacantes no autenticados acceder a archivos privados al explotar la inclusi\u00f3n del endpoint en la lista blanca de autenticaci\u00f3n global, lo que omite toda verificaci\u00f3n de sesi\u00f3n y clave API. Los atacantes pueden proporcionar identificadores v\u00e1lidos de chatflowId, chatId y fileName para recuperar archivos de cualquier chatflow en la instancia, incluyendo chatflows privados pertenecientes a otros espacios de trabajo u organizaciones."}], "lastModified": "2026-10-24T15:10:00.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B1037DF-0366-458C-AAC7-57448F94CA81", "versionEndIncluding": "3.1.4", "versionStartIncluding": "2.2.4"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}