CVE-2026-70472

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-store endpoints accept a client-controlled credential parameter and load credentials by id without checking whether that credential belongs to the caller workspace. Route permissions assistants:* only check feature access. The controller passes req.query.credential straight to the service, and the service uses findOneBy({ id: credentialId }), decrypts the credential, and calls OpenAI APIs without a workspaceId check. If an attacker knows another workspace credentialId, the attacker can use that workspace OpenAI key, read, modify, or delete victim vector stores and files, cause billing impact on the victim OpenAI account, and violate multi-tenant boundaries. This issue is fixed in version 3.1.3.

• CWE-285
• CWE-863

• https://github.com/FlowiseAI/Flowise/commit/d81483b70c997ddf981acc9c49fbd9a02fa345cd
• https://github.com/FlowiseAI/Flowise/pull/6170
• https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-chm3-vqcf-52rx
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-chm3-vqcf-52rx

Published

Aug 4, 2026

Last Modified

Aug 5, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-70466A incomplete list of disallowed inputs vulnerability in Fort…5.3
• CVE-2026-70467A server-side request forgery (ssrf) vulnerability in Fortin…3.8
• CVE-2026-70468A authentication bypass using an alternate path or channel v…8.1
• CVE-2026-7047The Frontend User Notes plugin for WordPress is vulnerable t…4.3
• CVE-2026-70470Flowise is a drag & drop user interface to build a customize…9.5
• CVE-2026-70471Flowise is a drag-and-drop user interface for building custo…7.1
• CVE-2026-70473Flowise is a drag-and-drop user interface for building custo…8.3
• CVE-2026-70474Flowise is a drag-and-drop user interface for building custo…7.6
• CVE-2026-70475Flowise is a drag & drop user interface to build a customize…7.1
• CVE-2026-70476Flowise is a drag & drop user interface to build a customize…8.3
• CVE-2026-70477Flowise is a drag & drop user interface to build a customize…9.5
• CVE-2026-70478Flowise is a drag & drop user interface to build a customize…9.2