Flowise
CVE-2026-30824
CRITICAL
GHSA-5f53-522j-j454
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAccess NVIDIA NIM router endpoint
-
ExploitBypass authentication middleware whitelist
-
ExecutionGenerate privileged tokens
-
ImpactExecute container management commands
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Flowise versions prior to 3.0.13 with NVIDIA NIM router endpoints exposed. No special conditions — remote unauthenticated exploitation against default Flowise deployments with unpatched versions. |
| Impact | CVSS 9.8. Combined with CVE-2026-30821 file upload, provides complete unauthenticated access to Flowise instances. |
| Exploit ScenarioDerived | Attacker accesses unprotected API endpoints to extract configuration, API keys, and internal data from the Flowise instance. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
Missing authentication on NVD data endpoint in Flowise before 3.0.13 allows unauthenticated access to internal vulnerability data. PoC available.
Earlier versions of this analysis (1)
Unauthenticated API access in Flowise AI platform.
RemediationAI
Update to Flowise 3.0.13. Enforce authentication on all endpoints.
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-306 missing authentication. Internal data endpoints accessible without credentials, exposing system configuration and data.
Know when Flowise gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
Lifecycle Timeline
3DescriptionGitHub Advisory
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints. This issue has been patched in version 3.0.13.
Articles & Coverage 1
Executive ViewAI
Flowise versions up to 3.0.13 contain a critical authentication bypass vulnerability (CVSS 9.8) that allows unauthorized access to critical functions without credentials. With public exploits available and no vendor patch currently released, any organization running affected versions faces immediate risk of unauthorized data access, system compromise, and potential lateral movement.
Implement network segmentation to restrict Flowise access to internal networks only; deploy WAF rules blocking requests to known vulnerable endpoints; disable Flowise if not critical to operations; enforce reverse proxy authentication in front of all Flowise instances; enable comprehensive logging and monitoring for suspicious access patterns; apply principle of least privilege to service accounts.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Affected Products (CPE)GitHub Advisory
Related Vulnerabilities in Flowise LLM Framework Authentication and Access
View all 5Flowise version 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig paramete
Flowise versions before 3.0.1 allow unauthenticated access to the Custom MCPs feature, which is designed to execute OS c
FlowiseAI Flowise version 2.2.6 contains an arbitrary file upload vulnerability in the /api/v1/attachments endpoint. Una
Arbitrary file read and write in Flowise versions prior to 3.0.8 allows an authenticated attacker with access to the flo
Remote code execution in Flowise before 3.1.2 allows any authenticated user (or API caller with chatflow view/update per
Flowise is a drag & drop user interface to build a customized large language model flow. Rated critical severity (CVSS 9
Authenticated users can upload arbitrary files to Flowise 3.0.7 due to missing validation, enabling persistent storage o
Authenticated remote code execution in FlowiseAI Flowise (v3.0.1 up to but not including 3.0.8, and later versions when
Remote code execution in Flowise before 3.1.3 arises because its Pyodide Python-code validator (validatePythonCodeForDat
Remote code execution in FlowiseAI Flowise before 3.1.3 lets an attacker execute arbitrary OS commands as the Flowise pr
Remote command execution in Flowise <= 3.1.2 lets an authenticated user break out of the vm2/@flowiseai/nodevm JavaScrip
Exploit-DB