{"action":"Upgrade flowise to 3.1.3 or later.","affected":[{"fixed":"3.1.3","introduced":"0"}],"component":"flowise","cve_ids":["CVE-2026-70471"],"ecosystem":"npm","epss":0.00412,"exploited":false,"fixed_versions":["3.1.3"],"ghsa_id":"GHSA-8r8h-6vcc-xhrv","id":"tcs_01M5KFDWTKZ3DVNR6YZ8SSF6EV","modified_at":"2026-08-04T18:11:01.113556Z","published_at":"2026-08-04T17:43:36Z","references":["https://osv.dev/vulnerability/GHSA-8r8h-6vcc-xhrv","https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8r8h-6vcc-xhrv","https://github.com/FlowiseAI/Flowise","https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-8r8h-6vcc-xhrv","url":"https://osv.dev/vulnerability/GHSA-8r8h-6vcc-xhrv"}],"summary":"Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure"}