Flowise - Authentication Bypass via Unprotected Registration Endpoint

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-71327 · Microsoft / collected KEV context

EUVD-2025-210337

GHSA-hh9f-v2g6-c33c

GHSA-v5w9-prxf-w882

cve-program · CVE-2025-71327

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-v5w9-prxf-w882
• https://www.vulncheck.com/advisories/flowise-authentication-bypass-via-unprotected-registration-endpoint

euvd · EUVD-2025-210337

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-v5w9-prxf-w882
• https://www.vulncheck.com/advisories/flowise-authentication-bypass-via-unprotected-registration-endpoint

nvd · CVE-2025-71327

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-v5w9-prxf-w882
• https://www.vulncheck.com/advisories/flowise-authentication-bypass-via-unprotected-registration-endpoint

osv · GHSA-v5w9-prxf-w882

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-v5w9-prxf-w882
• https://github.com/FlowiseAI/Flowise

No related operational record is retained in the current change model.