CVE-2025-71334

Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling operations. By supplying a path-traversal value (e.g., '../../../../../tmp') as the chatflow id, an unauthenticated attacker can use the /api/v1/chatflows endpoint (via addBase64FilesToStorage) to write arbitrary files, and the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints (via streamStorageFile) to read arbitrary files. Arbitrary file write may lead to remote code execution.

• CWE-73

• https://github.com/FlowiseAI/Flowise/commit/8bd3de41533de78e4ef6c980e5704a1f9cb7ae6fPatch
• https://github.com/FlowiseAI/Flowise/commit/c2b830f279e454e8b758da441016b2234f220ac7Patch
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-q67q-549q-p849Exploit, Vendor Advisory
• https://www.vulncheck.com/advisories/flowise-arbitrary-file-access-via-missing-chat-flow-id-validationThird Party Advisory
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-q67q-549q-p849Exploit, Vendor Advisory

Published

Jun 25, 2026

Last Modified

Jul 1, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-71329image-size through 2.0.2 contains a denial of service vulner…8.7
• CVE-2025-7133A vulnerability classified as problematic has been found in …5.4
• CVE-2025-71330image-size through 2.0.2 contains a denial of service vulner…8.7
• CVE-2025-71331Flowise before 3.0.8 contains a cross-site scripting (XSS) v…6.1
• CVE-2025-71332Flowise through 2.2.7 contains a SQL injection vulnerability…8.8
• CVE-2025-71333Flowise through 2.2.4 contains an unauthenticated arbitrary …9.8
• CVE-2025-71335Flowise before 3.0.10 (affected versions 3.0.7 and earlier) …8.6
• CVE-2025-71336Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and ea…9.8
• CVE-2025-71337Flowise before 3.0.10 (affected versions 3.0.7 and earlier) …8.7
• CVE-2025-71338Flowise contains a path traversal vulnerability in the /api/…9.8
• CVE-2025-71339Picklescan before 0.0.33 fails to detect the numpy.f2py.crac…8.1
• CVE-2025-7134A vulnerability classified as critical was found in Campcode…9.8