---
id: CVE-2026-100608
title: >-
  Flowise through 3.1.4 does not enforce authorization on the BullMQ admin
  dashboard
summary: >-
  Flowise through 3.1.4 does not enforce authorization on the BullMQ admin
  dashboard. When the server runs in queue mode with the dashboard enabled and
  not in cloud mode (MODE=queue, ENABLE_BULLMQ_DASHBOARD=true, and !isCloud()),
  the /admi…
severity: high
cvss: 8.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'
cwe:
  - CWE-862
vendor: FlowiseAI
product: Flowise
affected:
  - Flowise <= 3.1.4
published: '2026-09-26'
updated: '2026-09-26'
sourceUpdated: '2026-09-26T14:16:41.250'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100608'
references:
  - url: >-
      https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/flowise-through-3.1.4-authorization-bypass-via-bullmq-dashboard
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-26T13:33:20.933Z'
---

## Overview

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode (MODE=queue, ENABLE_BULLMQ_DASHBOARD=true, and !isCloud()), the /admin/queues mount is protected only by the verifyTokenForBullMQDashboard middleware, which validates the JWT but performs no role, permission, or workspace/organization scoping check; the mount also lies outside /api/v1/* so the global API gate does not apply. As a result, any authenticated user — including the lowest-privileged member of any tenant — can reach the full Bull-Board UI and view all queues and job payloads across the entire instance, including chat inputs and overrideConfig (which may carry credentials and prompts), chatflow.flowData graph definitions with custom function source code, credential IDs and system prompts, chatIds, files, and the originating orgId/workspaceId. The dashboard's write actions (retry, remove, promote, clean) are likewise usable across tenants. No patched version is available as of the advisory.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.