CVE-2026-67622 Details

A cross-workspace insecure direct object reference vulnerability has been identified in Flowise versions through 3.1.4, specifically within the OpenAI Assistants integration. This vulnerability allows authenticated attackers to access credentials from other workspaces by providing an arbitrary credential UUID to Assistants endpoints, bypassing workspace ownership verification. Exploitation of this vulnerability enables attackers to enumerate assistant metadata, retrieve file and vector store listings, upload files into victim workspaces, and consume the victim's OpenAI API quota, potentially leading to unexpected billing charges.

To address this vulnerability, Flowise should implement workspace validation before decrypting and using credential UUIDs. This can be done by scoping credential lookups to the active workspace and rejecting UUIDs that do not belong to the caller's workspace. Additionally, validating explicit workspace-sharing records before allowing cross-workspace credential use and performing authorization checks before credential decryption are recommended. Automated tests should also be added to cover cross-workspace credential access.