CVE-2026-100609 Details
Description
Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOneBy({ id: credentialId }) with no workspaceId condition) in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant (GET /api/v1/openai-assistants and /api/v1/openai-assistants/:id), uploadFilesToAssistant (POST /api/v1/openai-assistants-file/upload/), deleteAssistant (DELETE /api/v1/assistants/:id, reachable by first importing a poisoned assistant row via POST /api/v1/export-import/import), and the shared helper used by getVoices (GET /api/v1/text-to-speech/voices). An authenticated user of one workspace can supply a credential UUID belonging to another workspace, causing the server to decrypt and use that workspace's OpenAI or ElevenLabs API key on the attacker's behalf. No patched version was available at the time of publication.
A vulnerability exists in Flowise (npm packages 'flowise' and 'flowise-components') in versions through 3.1.4, allowing for cross-workspace insecure direct object reference (IDOR) via credential IDs. The issue arises because the application retrieves credentials by ID without considering the user's workspace, leaving a gap that authenticated users can exploit. This vulnerability is present in multiple API endpoints, including those for managing OpenAI assistants and handling text-to-speech voices. By supplying a credential UUID from a different workspace, an attacker can access and use that workspace's OpenAI or ElevenLabs API key.
No patched version is available. However, the vulnerability can be addressed by adding a workspace ID filter to all credential lookups, ensuring that only credentials from the user's active workspace are accessed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c | [email protected] | AdvisoryTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/flowise-through-3.1.4-insecure-direct-object-reference-via-credential | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Flowise | <= 3.1.4 (semver) |
CPE
Remediation
| |
| Flowise-components | <= 3.1.4 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 26, 2026 | New CVE Received | [email protected] |