ZDI-CAN-29410 HIGH 8.8 Upcoming Feb 24, 2026

Flowise

Flowise is an open-source low-code platform for building AI applications, and this vulnerability has a high severity rating of 8.8. The flaw can be exploited remotely by an authenticated user without user interaction, potentially allowing complete compromise of confidentiality, integrity, and availability of the affected system. Security teams should monitor for exploitation attempts targeting Flowise deployments and prioritize patching once updates become available by the June 2026 vendor deadline.

Advisory Details
Researcher Nicholas Zubrisky (@NZubrisky) of TrendAI Research
Reported February 24, 2026
Deadline June 24, 2026 69d
CVSS Vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy