{"id":"EUVD-2025-210336","enisaUuid":"ee184712-db48-3f2a-a9af-07e26db9e5a9","description":"Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.","datePublished":"Jun 25, 2026, 9:41:02 PM","dateUpdated":"Jun 30, 2026, 3:33:41 AM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf\nhttps://www.vulncheck.com/advisories/flowise-arbitrary-file-read-via-chatid-parameter\n","aliases":"CVE-2025-71324\nGHSA-4pwq-xw7j-m297\n","assigner":"VulnCheck","epss":1.57,"enisaIdProduct":[{"id":"102f7e9c-6b46-3848-ba47-9c8b178bb932","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.0.6"}],"enisaIdVendor":[{"id":"d714638a-0d47-3a6d-bf00-a87e8cbe1fd4","vendor":{"name":"Flowise"}}],"enisaIdVulnerability":[{"id":"7b5332eb-7c6f-3749-bca3-e1754f3b19a0","vulnerability":{"id":"CVE-2025-71324","description":"Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.","datePublished":"Jun 25, 2026, 9:41:02 PM","dateUpdated":"Jun 30, 2026, 3:33:41 AM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf\nhttps://www.vulncheck.com/advisories/flowise-arbitrary-file-read-via-chatid-parameter\n","enisa_id":"EUVD-2025-210336\n","assigner":"VulnCheck","epss":1.57,"dataProcessed":"Nov 8, 2026, 7:19:42 AM","vulnerabilityProduct":[{"id":"fdce8dc4-f9bc-3a9f-a202-790907025ed1","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.0.6"}],"vulnerabilityVendor":[{"id":"457240ff-c9db-3033-8aca-7b7971464bbb","vendor":{"name":"Flowise"}}]}},{"id":"dc193661-c511-3bdd-85cd-53c9068d3ce5","vulnerability":{"id":"GHSA-4pwq-xw7j-m297","description":"Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.","datePublished":"Jun 26, 2026, 12:32:04 AM","dateUpdated":"Jun 26, 2026, 12:32:04 AM","baseScore":0.0,"references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-71324\nhttps://www.vulncheck.com/advisories/flowise-arbitrary-file-read-via-chatid-parameter\n","enisa_id":"EUVD-2025-210336\n","aliases":"CVE-2025-71324\nGHSA-4pwq-xw7j-m297\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:59:14 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"a4ba6f02-d4a3-3266-a1fd-a403ebd8cc03","advisory":{"id":"WID-SEC-W-2025-2048","description":"Flowise: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um beliebigen Programmcode auszuführen, und um Informationen offenzulegen.","datePublished":"Sep 14, 2025, 10:00:00 PM","dateUpdated":"Jul 9, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2048.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2025-2048\n","aliases":"CVE-2025-58434\nCVE-2025-71324\nCVE-2025-71336\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"2a6d299b-f000-3cd5-84c6-0b2e14a04597","product":{"name":"3.0.6","vendor":{"name":"open source"}}},{"id":"8e9f048f-8718-353a-b130-f0bedfa5eee6","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}}}]}}]}