{"id":"EUVD-2026-52701","enisaUuid":"977ec436-310e-3c72-b2b5-bab46559e82b","description":"Flowise is a drag \u0026 drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in packages/components/nodes/recordmanager/MySQLRecordManager/MySQLrecordManager.ts, packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts, packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts, packages/components/nodes/memory/AgentMemory/MySQLAgentMemory/MySQLAgentMemory.ts, and packages/components/nodes/memory/AgentMemory/AgentMemory.ts. TypeORM DataSource options such as entities, subscribers, and migrations can load local JavaScript files, allowing an authenticated user to execute arbitrary code on the server by uploading a JavaScript payload and referencing it from additionalConfig.entities. This issue is fixed in version 3.1.3.","datePublished":"Aug 4, 2026, 2:27:55 PM","dateUpdated":"Aug 4, 2026, 3:35:08 PM","baseScore":9.0,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g32j-mmxr-gfq5\n","aliases":"CVE-2026-69251\nGHSA-g32j-mmxr-gfq5\n","assigner":"GitHub_M","epss":2.74,"enisaIdProduct":[{"id":"184b18cc-ecd9-3f2f-9c03-048ec47aca94","product":{"name":"flowise-components","vendor":{"name":"FlowiseAI"}},"product_version":"\u003c 3.1.3"},{"id":"7e261e1b-0fe9-3671-9921-f5fcfbed156b","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"\u003c 3.1.3"}],"enisaIdVendor":[{"id":"afbf5c70-13f0-3187-b12d-f00093b77d81","vendor":{"name":"FlowiseAI"}}],"enisaIdVulnerability":[{"id":"41e35342-1868-30dd-b38d-72205d58738e","vulnerability":{"id":"GHSA-g32j-mmxr-gfq5","description":"Flowise RCE via TypeORM DataSource","datePublished":"Aug 4, 2026, 2:28:04 PM","dateUpdated":"Aug 4, 2026, 2:28:04 PM","baseScore":0.0,"references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g32j-mmxr-gfq5\nhttps://github.com/FlowiseAI/Flowise\n","enisa_id":"EUVD-2026-52701\n","aliases":"CVE-2026-69251\nGHSA-g32j-mmxr-gfq5\n","epss":0.0,"dataProcessed":"Nov 15, 2026, 2:52:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6fc19493-f38f-3e91-a746-10a5ef0b22f9","vulnerability":{"id":"CVE-2026-69251","description":"Flowise is a drag \u0026 drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in packages/components/nodes/recordmanager/MySQLRecordManager/MySQLrecordManager.ts, packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts, packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts, packages/components/nodes/memory/AgentMemory/MySQLAgentMemory/MySQLAgentMemory.ts, and packages/components/nodes/memory/AgentMemory/AgentMemory.ts. TypeORM DataSource options such as entities, subscribers, and migrations can load local JavaScript files, allowing an authenticated user to execute arbitrary code on the server by uploading a JavaScript payload and referencing it from additionalConfig.entities. This issue is fixed in version 3.1.3.","datePublished":"Aug 4, 2026, 2:27:55 PM","dateUpdated":"Aug 4, 2026, 3:35:08 PM","status":"PUBLISHED","baseScore":9.0,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g32j-mmxr-gfq5\n","enisa_id":"EUVD-2026-52701\n","assigner":"GitHub_M","epss":2.74,"dataProcessed":"Nov 15, 2026, 7:20:17 AM","vulnerabilityProduct":[{"id":"123313ea-4187-3ba1-ac75-e5ec41436090","product":{"name":"flowise-components","vendor":{"name":"FlowiseAI"}},"product_version":"\u003c 3.1.3"},{"id":"b472fee2-c631-36b5-846d-3f5935f452dc","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"\u003c 3.1.3"}],"vulnerabilityVendor":[{"id":"57929e2a-a5b9-3af8-9105-c88bcfd268ae","vendor":{"name":"FlowiseAI"}}]}}],"enisaIdAdvisory":[{"id":"d6f37998-35a1-31bd-9d3e-064600926444","advisory":{"id":"WID-SEC-W-2026-2589","description":"Flowise: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, erweiterte Privilegien zu erlangen, Sicherheitsmaßnahmen zu umgehen, Sitzungen zu kapern sowie Daten offenzulegen oder zu manipulieren.","datePublished":"Jul 29, 2026, 10:00:00 PM","dateUpdated":"Sep 9, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2589.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-2589\n","aliases":"CVE-2026-69250\nCVE-2026-69251\nCVE-2026-69252\nCVE-2026-69253\nCVE-2026-69254\nCVE-2026-69255\nCVE-2026-69256\nCVE-2026-69257\nCVE-2026-69258\nCVE-2026-69259\nCVE-2026-69262\nCVE-2026-69263\nCVE-2026-69264\nCVE-2026-70470\nCVE-2026-70471\nCVE-2026-70472\nCVE-2026-70473\nCVE-2026-70474\nCVE-2026-70475\nCVE-2026-70476\nCVE-2026-70477\nCVE-2026-70478\nCVE-2026-73483\nCVE-2026-73484\nCVE-2026-73485\nCVE-2026-73486\nCVE-2026-73487\nCVE-2026-73601\nCVE-2026-73602\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"2ec5c62a-51c7-3b15-9f14-a61c20832b84","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}}},{"id":"535cd3fb-b464-3c87-8aea-7c308da7b4e3","product":{"name":"3.1.4","vendor":{"name":"open source"}}}]}}]}