{"id":"CVE-2026-70475","title":"Flowise is a drag & drop user interface to build a customized large language model flow","summary":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/executions/index.ts lacks the checkAnyPermission() middleware …","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-862"],"vendor":"flowiseai","product":"flowise","affected":["flowise < 3.1.3"],"patched":["flowise 3.1.3"],"published":"2026-08-04","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:08:48.403","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-70475","references":[{"url":"https://github.com/FlowiseAI/Flowise/commit/96a9b23b5a103b362a0ee1368d04636755be1bed","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/pull/6409","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-fm2f-4339-4p2f","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-fm2f-4339-4p2f","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://github.com/advisories/GHSA-fm2f-4339-4p2f"}],"tags":["nvd","ghsa","npm"],"epss":0.00307,"epssPercentile":0.23663,"aliases":["GHSA-fm2f-4339-4p2f"],"ecosystem":"npm","ingestedAt":"2026-08-04T19:41:28.980Z","slug":"CVE-2026-70475","body":"## Overview\n\nFlowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/executions/index.ts lacks the checkAnyPermission() middleware that protects other execution endpoints. Any authenticated user, regardless of assigned permissions, can modify execution state, data, and metadata of any execution in their workspace, enabling privilege escalation and manipulation of workflow execution results. This issue is fixed in 3.1.3.\n\n## Affected\n\n- `flowise < 3.1.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `flowise 3.1.3`\n\n## Package advisory (CVE-2026-70475)\n\nAffected packages:\n\n- `flowise <= 3.1.2`\n\nPatched in:\n\n- `flowise 3.1.3`\n\nSource: https://github.com/advisories/GHSA-fm2f-4339-4p2f","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201879,"id":"CVE-2026-70475","ts":1789399966612,"field":"cvss","old":null,"new":"6.5"},{"seq":201878,"id":"CVE-2026-70475","ts":1789399966612,"field":"severity","old":"high","new":"medium"},{"seq":200609,"id":"CVE-2026-70475","ts":1789397481135,"field":"cvss","old":"6.5","new":null},{"seq":200608,"id":"CVE-2026-70475","ts":1789397481135,"field":"severity","old":"medium","new":"high"},{"seq":199325,"id":"CVE-2026-70475","ts":1789395440369,"field":"cvss","old":null,"new":"6.5"},{"seq":199324,"id":"CVE-2026-70475","ts":1789395440369,"field":"severity","old":"high","new":"medium"},{"seq":198570,"id":"CVE-2026-70475","ts":1789392111268,"field":"cvss","old":"6.5","new":null},{"seq":198569,"id":"CVE-2026-70475","ts":1789392111268,"field":"severity","old":"medium","new":"high"},{"seq":198525,"id":"CVE-2026-70475","ts":1789392059162,"field":"cvss","old":null,"new":"6.5"},{"seq":198524,"id":"CVE-2026-70475","ts":1789392059162,"field":"severity","old":"high","new":"medium"},{"seq":196316,"id":"CVE-2026-70475","ts":1789383684252,"field":"cvss","old":"6.5","new":null},{"seq":196315,"id":"CVE-2026-70475","ts":1789383684252,"field":"severity","old":"medium","new":"high"},{"seq":195245,"id":"CVE-2026-70475","ts":1789380533425,"field":"cvss","old":null,"new":"6.5"},{"seq":195244,"id":"CVE-2026-70475","ts":1789380533425,"field":"severity","old":"high","new":"medium"},{"seq":194032,"id":"CVE-2026-70475","ts":1789378627575,"field":"cvss","old":"6.5","new":null},{"seq":194031,"id":"CVE-2026-70475","ts":1789378627575,"field":"severity","old":"medium","new":"high"},{"seq":192819,"id":"CVE-2026-70475","ts":1789376462685,"field":"cvss","old":null,"new":"6.5"},{"seq":192818,"id":"CVE-2026-70475","ts":1789376462685,"field":"severity","old":"high","new":"medium"},{"seq":191606,"id":"CVE-2026-70475","ts":1789373536379,"field":"cvss","old":"6.5","new":null},{"seq":191605,"id":"CVE-2026-70475","ts":1789373536379,"field":"severity","old":"medium","new":"high"},{"seq":190391,"id":"CVE-2026-70475","ts":1789369412244,"field":"cvss","old":null,"new":"6.5"},{"seq":190390,"id":"CVE-2026-70475","ts":1789369412244,"field":"severity","old":"high","new":"medium"},{"seq":189178,"id":"CVE-2026-70475","ts":1789368328423,"field":"cvss","old":"6.5","new":null},{"seq":189177,"id":"CVE-2026-70475","ts":1789368328423,"field":"severity","old":"medium","new":"high"},{"seq":187961,"id":"CVE-2026-70475","ts":1789365196567,"field":"cvss","old":null,"new":"6.5"},{"seq":187960,"id":"CVE-2026-70475","ts":1789365196567,"field":"severity","old":"high","new":"medium"},{"seq":186748,"id":"CVE-2026-70475","ts":1789363398934,"field":"cvss","old":"6.5","new":null},{"seq":186747,"id":"CVE-2026-70475","ts":1789363398934,"field":"severity","old":"medium","new":"high"},{"seq":185534,"id":"CVE-2026-70475","ts":1789361178750,"field":"cvss","old":null,"new":"6.5"},{"seq":185533,"id":"CVE-2026-70475","ts":1789361178750,"field":"severity","old":"high","new":"medium"},{"seq":184321,"id":"CVE-2026-70475","ts":1789358256884,"field":"cvss","old":"6.5","new":null},{"seq":184320,"id":"CVE-2026-70475","ts":1789358256884,"field":"severity","old":"medium","new":"high"},{"seq":182572,"id":"CVE-2026-70475","ts":1789354271926,"field":"cvss","old":null,"new":"6.5"},{"seq":182571,"id":"CVE-2026-70475","ts":1789354271926,"field":"severity","old":"high","new":"medium"},{"seq":181365,"id":"CVE-2026-70475","ts":1789353229143,"field":"cvss","old":"6.5","new":null},{"seq":181364,"id":"CVE-2026-70475","ts":1789353229143,"field":"severity","old":"medium","new":"high"},{"seq":180158,"id":"CVE-2026-70475","ts":1789350222586,"field":"cvss","old":null,"new":"6.5"},{"seq":180157,"id":"CVE-2026-70475","ts":1789350222586,"field":"severity","old":"high","new":"medium"},{"seq":178951,"id":"CVE-2026-70475","ts":1789348200112,"field":"cvss","old":"6.5","new":null},{"seq":178950,"id":"CVE-2026-70475","ts":1789348200112,"field":"severity","old":"medium","new":"high"},{"seq":177744,"id":"CVE-2026-70475","ts":1789346328462,"field":"cvss","old":null,"new":"6.5"},{"seq":177743,"id":"CVE-2026-70475","ts":1789346328462,"field":"severity","old":"high","new":"medium"},{"seq":176537,"id":"CVE-2026-70475","ts":1789343113759,"field":"cvss","old":"6.5","new":null},{"seq":176536,"id":"CVE-2026-70475","ts":1789343113759,"field":"severity","old":"medium","new":"high"},{"seq":174654,"id":"CVE-2026-70475","ts":1789334836842,"field":"cvss","old":null,"new":"6.5"},{"seq":174653,"id":"CVE-2026-70475","ts":1789334836842,"field":"severity","old":"high","new":"medium"},{"seq":173449,"id":"CVE-2026-70475","ts":1789333604963,"field":"cvss","old":"6.5","new":null},{"seq":173448,"id":"CVE-2026-70475","ts":1789333604963,"field":"severity","old":"medium","new":"high"},{"seq":172263,"id":"CVE-2026-70475","ts":1789331052595,"field":"cvss","old":null,"new":"6.5"},{"seq":172262,"id":"CVE-2026-70475","ts":1789331052595,"field":"severity","old":"high","new":"medium"}]}