VULNERABILITY INTELLIGENCE

CVE-2026-46440

CVSS score9.1 CRITICAL
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-06-08
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, the checkBasicAuth endpoint validates credentials in plaintext without rate limiting and with direct comparison. This issue has been patched in version 3.1.2.

Weakness classification

  • security-advisories@github.com: CWE-522

Primary references