CVE-2025-71334
1 advisory.
npm/flowise CVE-2025-71334: critical 9.8, EPSS 4.36%
Flowise has arbitrary file access due to missing chat flow id validation
Action: Upgrade flowise to 3.0.6 or later.
npm i flowise@3.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.8 | 3.0.6 | - |
Fixed versions
| 3.0.6 |
Sources
- osv: GHSA-q67q-549q-p849
- https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-q67q-549q-p849
- https://github.com/FlowiseAI/Flowise/commit/8bd3de41533de78e4ef6c980e5704a1f9cb7ae6f
- https://github.com/FlowiseAI/Flowise/commit/c2b830f279e454e8b758da441016b2234f220ac7
- https://github.com/FlowiseAI/Flowise
CVE-2025-71334 · published · modified · JSON