PT-2026-41206 · Flowiseai+2 · Flowise

CVE-2026-46441 · Published 2026-05-14 · Updated 2026-06-11

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.2

Description A mass assignment issue exists in the assistant update endpoint. This occurs when the server does not restrict which properties can be modified by the client, allowing user-controlled request bodies to include fields that should be managed exclusively by the backend. Authenticated users can manipulate server-controlled properties, specifically workspaceId, createdDate, and updatedDate, via the 'PUT /api/v1/assistants/{assistantId}' endpoint. Due to a lack of server-side validation and authorization checks, an attacker can change the workspaceId field to reassign assistants to arbitrary workspaces, which breaks tenant isolation in multi-workspace environments.

Recommendations Update to version 3.1.2.

Exploit

Fix

Improper Access Control

IDOR

Weakness Enumeration

CWE-284

CWE-639

CWE-915

Related Identifiers

CVE-2026-46441

GHSA-HP26-Q66V-Q2W7

Affected Products

Flowise

References · 9

• 🔥 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-hp26-q66v-q2w7 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46441.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-46441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46441 · Security Note
• https://osv.dev/vulnerability/GHSA-hp26-q66v-q2w7 · Vendor Advisory
• https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.2 · Note
• https://github.com/FlowiseAI/Flowise · Note
• https://t.me/cveNotify/166622 · Telegram Post
• https://t.me/cveNotify/167013 · Telegram Post