Flowise: Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the…
Flowise
More for Flowise RSS feed for Flowise
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2025-71333
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 25, 2026
- Source last modified
- October 12, 2026
Description
Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local. Attackers can exploit path traversal in the chatId and chatflowId parameters to upload malicious files to arbitrary directories, potentially enabling remote code execution and server compromise.
Description quoted from the NVD record.
Who is affected
Flowise is a tool for building apps that use AI language models, such as chatbots. This flaw affects Flowise versions up to and including 2.2.4, when the product is set up to store files on its own server (the local storage setting). The problem is in the part of the product that accepts file attachments. Someone with no login could trick it into saving harmful files in any folder on the server, which could let them run their own programs and take over the server. This flaw is rated Critical.
What to do
- If you or someone in your organization installed and runs Flowise, that person should act on this. If an IT provider or vendor runs it for you, send them this advisory and ask when the update will be done.
- Check which version of Flowise you use. Versions up to and including
2.2.4are affected. - Find out whether your Flowise is set to store files on its own server (the local storage setting), since this flaw affects that setup.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release and install it as soon as it is available.
Analysis written from the source record as of October 12, 2026 and reviewed before publishing.