ZDI-CAN-29410
HIGH 8.8
Upcoming
Feb 24, 2026
Flowise
Flowise is an open-source low-code platform for building AI applications, and this vulnerability has a high severity rating of 8.8. The flaw can be exploited remotely by an authenticated user without user interaction, potentially allowing complete compromise of confidentiality, integrity, and availability of the affected system. Security teams should monitor for exploitation attempts targeting Flowise deployments and prioritize patching once updates become available by the June 2026 vendor deadline.
Advisory Details
Researcher
Nicholas Zubrisky (@NZubrisky) of TrendAI Research
Reported
February 24, 2026
Deadline
June 24, 2026
69d
CVSS Vector
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H