Flowise: Flowise through 2.2.7 contains a SQL injection vulnerability in the importChatflows API
Flowise
More for Flowise RSS feed for Flowise
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2025-71332
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 24, 2026
- Source last modified
- October 12, 2026
Description
Flowise through 2.2.7 contains a SQL injection vulnerability in the importChatflows API. Due to insufficient validation of the chatflow.id value, an authenticated user can supply a crafted JSON import file whose id field is concatenated unsanitized into a SQL IN clause, allowing arbitrary SQL to be executed, including blind and error-based extraction of data from the credential table.
Description quoted from the NVD record.
Who is affected
Flowise is a tool for building apps that use AI language models. This flaw affects Flowise versions through 2.2.7, in the feature that imports chatflows (saved AI workflows) from a file. Someone who can already sign in to Flowise could upload a specially crafted import file that makes the product run database commands of their choosing. That could let them pull out stored data, including the saved credentials (logins and keys for connected services) that Flowise keeps. This flaw is rated High.
What to do
- If your organization installed and runs Flowise itself, the person who set it up should check which version is running. Any version up to and including 2.2.7 is affected.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release and install it as soon as one is available.
- If an IT provider or vendor runs Flowise for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 12, 2026 and reviewed before publishing.