QSearchQSearch

CVE-2026-46480

8.8 HIGH

Flowise is a drag & drop user interface to build a customized large language model flow

Published: 2026-06-08 · Last updated: 2026-06-09

Severity and scoring

CVSS
8.8 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-915

Affected products

VendorProduct
flowiseaiflowise

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluator create and update mass-assignment allows cross-workspace evaluator takeover. This issue has been patched in version 3.1.2.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-46444 — Flowise is a drag & drop user interface to build a customized large language model flow (8.8 HIGH)
  • CVE-2026-46443 — Flowise is a drag & drop user interface to build a customized large language model flow (6.5 MEDIUM)
  • CVE-2026-46442 — Flowise is a drag & drop user interface to build a customized large language model flow (9.9 CRITICAL)
  • CVE-2026-46441 — Flowise is a drag & drop user interface to build a customized large language model flow (9.6 CRITICAL)
  • CVE-2026-46440 — Flowise is a drag & drop user interface to build a customized large language model flow (9.1 CRITICAL)

Same CWE

  • CVE-2026-46517 — LMDeploy is a toolkit for compressing, deploying, and serving large language models (7.8 HIGH)
  • CVE-2026-46479 — Flowise is a drag & drop user interface to build a customized large language model flow
  • CVE-2026-46478 — Flowise is a drag & drop user interface to build a customized large language model flow
  • CVE-2026-46477 — Flowise is a drag & drop user interface to build a customized large language model flow
  • CVE-2026-46476 — Flowise is a drag & drop user interface to build a customized large language model flow