Flowise: Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients…
Flowise
More for Flowise RSS feed for Flowise
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-43995
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- May 11, 2026
- Source last modified
- October 26, 2026
Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients (node-fetch, axios) instead of using the secured wrapper. These tools include (1) OpenAPIToolkit/OpenAPIToolkit.ts, (2) WebScraperTool/WebScraperTool.ts, (3) MCP/core.ts, and (4) Arxiv/core.ts. This vulnerability is fixed in 3.1.0.
Description quoted from the NVD record.
Who is affected
Flowise is a drag and drop tool for building apps that use AI language models. This flaw affects versions before 3.1.0. Several built-in building blocks that let a workflow reach out over the internet send their web requests directly, skipping the safety layer Flowise provides for outgoing web requests. These include the tool that connects to other web services, the web page reader, the connector to outside tool servers, and the research paper search tool. If your organization runs Flowise at a version before 3.1.0, this applies to you. This flaw is rated Critical.
What to do
- If someone on your staff or a volunteer installed and runs Flowise, ask them to check which version your organization is using.
- If the version is older than
3.1.0, have that person update Flowise to3.1.0or later, which fixes this flaw. - If an IT provider or vendor runs Flowise for your organization, send them this advisory and ask when the update will be done.
- After the update, ask whoever manages Flowise to check the vendor advisory linked on this page for any further details about the fix.
Analysis written from the source record as of October 26, 2026 and reviewed before publishing.