Flowise: An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the…
Flowise
More for Flowise RSS feed for Flowise
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-52098
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- September 10, 2026
- Source last modified
- September 15, 2026
Description
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
Description quoted from the NVD record.
Who is affected
Flowise is a tool for building apps and chatbots that use AI language models. This flaw affects Flowise version 3.1.2. It is in the part of the product that receives questions sent to a finished flow (a chatbot or AI workflow built in Flowise) and sends back answers. A remote attacker, meaning someone reaching it over a network or the internet, could use this part to run their own code on the computer where Flowise is installed. This flaw is rated Critical.
What to do
- If someone in your organization installed or runs Flowise, they should check which version is in use. If it is version
3.1.2, this flaw applies to you. - No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release, and install it as soon as one is available.
- If an IT provider or vendor runs Flowise for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of September 15, 2026 and reviewed before publishing.