An issue in Flowise 3.1.2

Published September 10, 2026 CVE-2026-52098

Flowise 3.1.2 has a flaw that lets a remote attacker run arbitrary code through its prediction endpoint.

Severity
CriticalCVSS 3.1 · 9.8
Fix
Not confirmedLast checked yesterday
Weakness
CWE-94Code Injection
Exploit likelihood
0.79% in 30 daysEPSS, higher than 54% of known flaws
Exploited
Not confirmedNo confirmation recorded
CISA SSVC
No known exploitationAutomatable: yes · Technical impact: total
EU ID
EUVD-2026-75621ENISA vulnerability database

How it works

  • A remote attacker reaches Flowise's /api/v1/prediction/<flowId> endpoint.
  • The record says this issue allows arbitrary code execution.
  • It does not establish the exact request or prerequisite.

What to do

Check the Flowise version in each deployment and compare it with the CVE-2026-52098 record. A matching 3.1.2 installation falls within the stated affected scope.

The supplied evidence does not identify a fixed version or mitigation. Consult the Flowise project for documented remediation before exposing the service to remote users.

Technical details

CVE-2026-52098 affects Flowise 3.1.2 through the /api/v1/prediction/<flowId endpoint. The CVE record says exploitation requires no privileges or user interaction and could affect confidentiality, integrity, and availability.

Severity breakdown

  • Attack vector Network Requires network access to the vulnerable service
  • Attack complexity Low Low complexity under the assessed conditions
  • Privileges required None Attacker needs no account or login
  • User interaction None No victim action needed
  • Scope Unchanged Impact stays within the same security authority
  • Confidentiality impact High Sensitive data can be exposed with serious impact
  • Integrity impact High Protected data can be changed with serious impact
  • Availability impact High The service can stop or suffer serious disruption
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Open in FIRST.org calculator

References

View Original Source