← Back to CVE search

CVE-2026-46478

Flowise

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, DatasetRow create and update mass-assignment allows cross-workspace row takeover. This issue has been patched in version 3.1.2.

CVSS 8.8EPSS 0.34199999999999997%Risk 0.91
View source
Published
2026-06-08 16:16:42
Affected versions
<3.1.2
Type
Core software
Last modified
2026-07-23 07:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H