Flowise: FlowiseAI: Vector Store No Permission Checks
Flowise
More for Flowise RSS feed for Flowise
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-46444
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 8, 2026
- Source last modified
- July 23, 2026
Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRUD endpoints for OpenAI Assistants Vector Store have no authentication middleware and the route path /api/v1/openai-assistants-vector-store is not in WHITELIST_URLS. However, it is also not protected by the main auth middleware when accessed via API key — the route requires API key auth (not whitelisted), but no permission checks exist on any operation. This issue has been patched in version 3.1.2.
Description quoted from the NVD record.
Who is affected
Flowise is a drag-and-drop tool for building apps that use AI language models. This flaw affects versions before 3.1.2. It is in the part of Flowise that manages document stores for OpenAI Assistants (collections of information an AI assistant can search). That part does not check permissions for any action, so anyone holding a Flowise API key could create, view, change or delete these stores, whatever that key is meant to allow. If your organization runs Flowise, or someone runs it for you, this applies to you. This flaw is rated High.
What to do
- Find out whether your organization uses Flowise. If you are not sure, ask the person who looks after your computers or online tools.
- If you or a staff member installed and run Flowise, that person should update it to version
3.1.2or later. - If an IT provider or vendor runs Flowise for your organization, send them this advisory and ask when the update will be done.
- After the update, have whoever made it check that Flowise now shows version
3.1.2or later.
Analysis written from the source record as of July 23, 2026 and reviewed before publishing.