{"id":"CVE-2026-70471","title":"Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows","summary":"Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protecte…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-863"],"vendor":"flowiseai","product":"flowise","affected":["flowise < 3.1.3"],"patched":["flowise 3.1.3"],"published":"2026-08-04","updated":"2026-09-14","sourceUpdated":"2026-09-14T19:09:15.917","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-70471","references":[{"url":"https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-8r8h-6vcc-xhrv","label":"security-advisories@github.com"},{"url":"https://github.com/advisories/GHSA-8r8h-6vcc-xhrv"}],"tags":["nvd","ghsa","npm"],"epss":0.00253,"epssPercentile":0.17048,"aliases":["GHSA-8r8h-6vcc-xhrv"],"ecosystem":"npm","ingestedAt":"2026-08-04T18:41:08.206Z","slug":"CVE-2026-70471","body":"## Overview\n\nFlowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces variables:view. A user or API key that is denied variables:view can call /api/v1/node-custom-function and receive $vars pre-populated with all variables for the workspace, including Variable.name to Variable.value static variables and Variable.name to process.env[Variable.name] runtime variables. This can expose secrets such as database passwords, JWT secrets, SMTP passwords, and cloud keys, depending on the workspace Variables configuration. This issue is fixed in version 3.1.3.\n\n## Affected\n\n- `flowise < 3.1.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `flowise 3.1.3`\n\n## Package advisory (CVE-2026-70471)\n\nAffected packages:\n\n- `flowise <= 3.1.2`\n\nPatched in:\n\n- `flowise 3.1.3`\n\nSource: https://github.com/advisories/GHSA-8r8h-6vcc-xhrv","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":203142,"id":"CVE-2026-70471","ts":1789413237624,"field":"cvss","old":null,"new":"6.5"},{"seq":203141,"id":"CVE-2026-70471","ts":1789413237624,"field":"severity","old":"high","new":"medium"}]}