CVE-2025-71331

Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., <iframe src="javascript:alert(document.cookie)">) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim's browser, enabling theft of cookies and session data.

• CWE-80

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4fr9-3x69-36wvExploit, Vendor Advisory
• https://www.vulncheck.com/advisories/flowise-cross-site-scripting-in-chat-messages-and-agent-workflowsThird Party Advisory
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4fr9-3x69-36wvExploit, Vendor Advisory

Published

Jun 20, 2026

Last Modified

Jun 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-71326AVAST Antivirus 25.11 contains an unquoted service path vuln…8.5
• CVE-2025-71327Flowise contains an authentication bypass vulnerability in t…9.3
• CVE-2025-71328Flowise before 3.0.10 contains an unverified password change…8.8
• CVE-2025-71329image-size through 2.0.2 contains a denial of service vulner…8.7
• CVE-2025-7133A vulnerability classified as problematic has been found in …5.4
• CVE-2025-71330image-size through 2.0.2 contains a denial of service vulner…8.7
• CVE-2025-71332Flowise through 2.2.7 contains a SQL injection vulnerability…8.8
• CVE-2025-71333Flowise through 2.2.4 contains an unauthenticated arbitrary …9.8
• CVE-2025-71334Flowise before 3.0.6 (affected versions 2.2.8 and earlier) c…9.8
• CVE-2025-71335Flowise before 3.0.10 (affected versions 3.0.7 and earlier) …8.6
• CVE-2025-71336Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and ea…9.8
• CVE-2025-71337Flowise before 3.0.10 (affected versions 3.0.7 and earlier) …8.7