CVE-2026-71962
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Flowise versions 2.2.4 through 3.1.4 have a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint, which is in the global authentication whitelist. An unauthenticated attacker can access private files from any chatflow, including those from other organizations.
Risk Assessment
An attacker can steal confidential files from any chatflow, potentially compromising data privacy and security.
Recommendation
Update Flowise to a version newer than 3.1.4 that includes the authorization fix.
Original NVD description (English source)
Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attackers to access private files by exploiting the endpoint's inclusion in the global authentication whitelist, which bypasses all session and API key verification. Attackers can supply valid chatflowId, chatId, and fileName identifiers to retrieve files from any chatflow on the instance, including private chatflows belonging to other workspaces or organizations.