CVE Catalog
CVE-2026-46476
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.27%
18th percentile - higher than 18% of all known CVEs
Summary
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-workspace template takeover.
Risk Assessment
Organizations may be exposed to unauthorized template takeover, potentially leading to uncontrolled access to data and resources.
Recommendation
It is recommended to upgrade to version 3.1.2 or later to mitigate this vulnerability.
Original NVD description (English source)
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-workspace template takeover. This issue has been patched in version 3.1.2.