ZDI-CAN-28762 HIGH 8.1 Upcoming Feb 19, 2026

Flowise

Flowise is an open-source low-code platform for building AI applications and chatbots. This high-severity vulnerability (CVSS 8.1) can be exploited remotely by unauthenticated attackers over the network, though it requires specific conditions to be present, and results in complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patch releases from Flowise and assess whether their deployments are exposed to network access, as exploitation could allow attackers to take full control of affected systems.

Advisory Details
Researcher Nicholas Zubrisky (@NZubrisky) of TrendAI Research
Reported February 19, 2026
Deadline June 19, 2026 63d
CVSS Vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy