PT-2026-41210 · Flowiseai+2 · Flowise
CVE-2026-46475
·
Published
2026-05-14
·
Updated
2026-06-12
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Flowise versions prior to 3.1.2
Description
A mass assignment issue exists in the assistant create and update processes. The application uses
Object.assign() to copy the request body into the Assistant entity without an explicit field allowlist, allowing a client to overwrite sensitive fields. Specifically, an authenticated user can manipulate the workspaceId or id variables via the PUT /api/v1/assistants/<id> endpoint. This allows an attacker to move an assistant to a different workspace by specifying a target workspace UUID, leading to cross-workspace assistant takeover and Insecure Direct Object Reference (IDOR). This exposes the assistant's LLM configuration, system prompts, tool lists, and credentials to the destination workspace.Recommendations
Update to version 3.1.2.
As a temporary workaround, restrict access to the
PUT /api/v1/assistants/<id> endpoint or monitor request bodies for unauthorized changes to the workspaceId and id variables.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Flowise