SQL Injection in Flowise AI through 2.2.7

Executive Summary

This vulnerability is a SQL injection issue in the Flowise application, specifically in the importChatflows API up to version 2.2.7.

It occurs because the chatflow.id parameter is not properly validated. An authenticated user can supply a specially crafted JSON import file where the id field contains malicious SQL code.

When this file is imported, the malicious id is concatenated unsanitized into a SQL IN clause, allowing arbitrary SQL commands to be executed on the database.

This can include blind and error-based extraction of sensitive data, such as credentials stored in the database.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized access and extraction of sensitive data from the Flowise application's database.

An attacker with authenticated access can execute arbitrary SQL commands, potentially compromising the confidentiality and integrity of stored credentials.

This could result in data breaches, unauthorized data manipulation, and further exploitation of the system.

Useful 0 Not Useful 0

Detection Guidance

Detection of this vulnerability involves monitoring for suspicious activity related to the importChatflows API, especially attempts to import crafted JSON files with malicious chatflow.id values.

Since the vulnerability requires authenticated access, reviewing logs for unusual importChatflows API usage or unexpected SQL errors can help identify exploitation attempts.

Commands to detect potential exploitation might include searching application logs for importChatflows API calls with unusual or non-UUID chatflow.id values.

• Use grep or similar tools to find suspicious import attempts: grep -i 'importChatflows' /path/to/flowise/logs/*
• Check for non-UUID patterns in imported JSON files or API requests.
• Monitor database logs for unusual SQL queries or errors related to the chatflow.id parameter.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting the chatflow.id values to UUIDs to prevent injection of malicious SQL payloads.

Since no patched versions are currently available, it is recommended to limit authenticated users' ability to import arbitrary JSON files and to monitor and audit importChatflows API usage closely.

• Restrict chatflow.id inputs strictly to UUID format.
• Limit access to the importChatflows API to trusted users only.
• Implement additional input validation or filtering on the server side if possible.
• Monitor logs for suspicious import activity and SQL errors.

Useful 0 Not Useful 0

Compliance Impact

The SQL injection vulnerability in Flowise through 2.2.7 allows authenticated users to execute arbitrary SQL commands, including extraction of sensitive data such as credentials stored in the database.

This unauthorized access and potential data leakage can lead to violations of data protection regulations and standards like GDPR and HIPAA, which require safeguarding sensitive personal and health information against unauthorized access and breaches.

Therefore, exploitation of this vulnerability could compromise confidentiality and integrity of sensitive data, negatively impacting compliance with these common standards and regulations.

Useful 0 Not Useful 0