CVE-2026-52098

Description

An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint

Traduire en français

Produits concernés

• Flowiseai flowise

Scores CVSS

Faiblesses (CWE)

• CWE-94

Références

• https://github.com/FlowiseAI/Flowise Product
• https://github.com/FlowiseAI/Flowise/blob/main/packages/server/src/utils/constants.ts Product
• https://github.com/FlowiseAI/Flowise/blob/main/packages/server/src/utils/validateKey.ts Product

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories