CVE-2026-70471
Received Received - Intake

Information Disclosure in Flowise AI

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces variables:view. A user or API key that is denied variables:view can call /api/v1/node-custom-function and receive $vars pre-populated with all variables for the workspace, including Variable.name to Variable.value static variables and Variable.name to process.env[Variable.name] runtime variables. This can expose secrets such as database passwords, JWT secrets, SMTP passwords, and cloud keys, depending on the workspace Variables configuration. This issue is fixed in version 3.1.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-70471
EUVD
EUVD-2026-52850

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
flowise flowise 3.1.3
flowiseai flowise to 3.1.3 (exc)
flowiseai flowise 3.1.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-70471 is a high-severity vulnerability in Flowise versions up to 3.1.2 where an RBAC bypass allows unauthorized access to workspace variables. The issue occurs because the /api/v1/node-custom-function endpoint injects $vars into the code execution sandbox without requiring variables:view permissions. This exposes sensitive data like database passwords, JWT secrets, or cloud keys.

Detection Guidance

Check Flowise version with 'npm list -g flowise' or 'flowise --version'. If version is below 3.1.3, the system is vulnerable. Inspect network logs for requests to /api/v1/node-custom-function with unauthorized access patterns.

Impact Analysis

An attacker with limited access could exploit this to retrieve secrets such as database passwords, JWT secrets, SMTP passwords, or cloud keys configured in the workspace. This could lead to unauthorized data access, service disruption, or further attacks depending on the exposed credentials.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security rules. Exposure of secrets like database passwords or API keys may result in non-compliance with data security requirements, potentially leading to legal penalties or reputational damage.

Mitigation Strategies

Upgrade Flowise to version 3.1.3 or later immediately. Review and restrict workspace variable permissions to enforce variables:view requirements. Audit all exposed secrets and rotate compromised credentials.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70471. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart