CVE-2025-71338Critical· 10.0▾ AbyssalPoC availableFlowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write files outside the storage directory. Attackers can use parent-directory sequences to escape the stor…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 55 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 17.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.9%
0.9% → 1.2%
Last analysed / modified upstream
Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write files outside the storage directory. Attackers can use parent-directory sequences to escape the storage directory and overwrite application files loaded at boot for remote code execution.
flowise <= 3.1.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
flowise <= 2.2.7Connected by shared product, vendor, weakness, or advisory.
GHSA-c3hj-m5hq-59xwCritical· 10.0Duplicate Advisory : Flowise allows arbitrary file write to RCE
CVE-2025-71334Critical· 9.8Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling operations
GHSA-w5r9-j49j-2m55Critical· 9.8Duplicate Advisory : Flowise has arbitrary file access due to missing chat flow id validation
CVE-2026-69254High· 8.8Flowise is a drag & drop user interface to build a customized large language model flow
CVE-2026-69251High· 8.8Flowise is a drag & drop user interface to build a customized large language model flow
CVE-2026-73487CriticalFlowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass