ZDI-CAN-28762
HIGH 8.1
Upcoming
Feb 19, 2026
Flowise
Flowise is an open-source low-code platform for building AI applications and chatbots. This high-severity vulnerability (CVSS 8.1) can be exploited remotely by unauthenticated attackers over the network, though it requires specific conditions to be present, and results in complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patch releases from Flowise and assess whether their deployments are exposed to network access, as exploitation could allow attackers to take full control of affected systems.
Advisory Details
Researcher
Nicholas Zubrisky (@NZubrisky) of TrendAI Research
Reported
February 19, 2026
Deadline
June 19, 2026
63d
CVSS Vector
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H