CVE-2026-90534
Received Received - Intake

Flowise Credential Confusion via Unauthorized Workspace Access

Publication date: 2026-09-12

Last updated on: 2026-09-12

Assigner: VulnCheck

Description
Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounted without any route-level permission check and invokes component loadMethods with an attacker-controlled nodeName, loadMethod, inputs, and credential value. The selected credential is resolved by raw Credential.id via getCredentialData() and decrypted without verifying Credential.workspaceId against the caller's active or shared workspace, unlike other credential read paths which are workspace-scoped. As a result, an authenticated low-privilege user (or workspace API key) in one workspace can supply a credential ID owned by another workspace and cause Flowise to act as a confused deputy, performing third-party provider calls with the victim workspace's credential and returning provider metadata to the attacker. Statically identified affected load methods include Google Drive listFiles, Google Sheets listSpreadsheets, and AWS DynamoDB KV Storage listTables. The raw credential secret itself is not returned to the attacker. This issue is fixed in version 3.1.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-12
Last Modified
2026-09-12
Generated
2026-09-12
AI Q&A
2026-09-12
EPSS Evaluated
N/A
NVD
CVE-2026-90534
EUVD
EUVD-2026-76852

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
flowiseai flowise to 3.1.3 (inc)
flowise flowise to 3.1.3 (inc)
flowise flowise From 3.1.4 (inc)
google drive *
google sheets *
aws dynamodb *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-90534 is an Insecure Direct Object Reference (IDOR) vulnerability in Flowise versions up to 3.1.3. It affects the POST /api/v1/node-load-method/:name endpoint, which lacks permission checks. An attacker with low privileges in one workspace can supply a credential ID from another workspace, causing Flowise to use the victim's credential for third-party provider calls like Google Drive, Google Sheets, or AWS DynamoDB. The raw credential secret is not exposed, but metadata from these calls may be returned to the attacker.

Detection Guidance

To detect this vulnerability, inspect Flowise logs for unauthorized API calls to third-party services like Google Drive, Google Sheets, or AWS DynamoDB from unexpected workspaces. Check for POST requests to /api/v1/node-load-method/:name with credential IDs not belonging to the caller's workspace. Monitor for metadata responses from these services that indicate cross-workspace access.

Impact Analysis

This vulnerability allows an attacker to enumerate resources in other workspaces, such as files in Google Drive, spreadsheets in Google Sheets, or tables in AWS DynamoDB. It can lead to unauthorized data exposure, consumption of third-party API quotas, and creation of audit events under the victim's identity. The impact is limited to metadata exposure and does not expose raw credentials.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access to sensitive data across workspaces. GDPR may be impacted due to potential unauthorized data exposure, while HIPAA could be affected if protected health information is exposed through third-party integrations. Organizations must ensure proper access controls to maintain compliance.

Mitigation Strategies

Immediately upgrade Flowise to version 3.1.4 or later. Review and restrict API key permissions to ensure low-privilege users cannot access credentials outside their workspace. Implement network-level monitoring to block unauthorized outbound calls to third-party services. Audit existing credentials and revoke any suspicious or unused ones.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90534. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart