CVE-2026-70471
published 2026-08-04CVE-2026-70471: Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code…
PriorityP342high7.1CVSS 4.0
AVNACLATNPRLUINVCHVINVANSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.28%
20.3th percentile
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetched at packages/components/src/utils.ts and runtime variables are resolved from server environment variables, while the official variables route enforces variables:view. A user or API key that is denied variables:view can call /api/v1/node-custom-function and receive $vars pre-populated with all variables for the workspace, including Variable.name to Variable.value static variables and Variable.name to process.env[Variable.name] runtime variables. This can expose secrets such as database passwords, JWT secrets, SMTP passwords, and cloud keys, depending on the workspace Variables configuration. This issue is fixed in version 3.1.3.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| flowiseai | flowise | < 3.1.3 | 3.1.3 |
| flowiseai | flowise | >= 0 < 3.1.3 | 3.1.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
FlowiseAI Flowise up to 3.1.2 Code Execution Sandbox utils.ts vars privileges management
vuldb·2026-08-04·CVSS 7.1
CVE-2026-70471 [HIGH] FlowiseAI Flowise up to 3.1.2 Code Execution Sandbox utils.ts vars privileges management
A vulnerability was found in FlowiseAI Flowise up to 3.1.2. It has been declared as critical. This vulnerability affects unknown code of the file packages/components/src/utils.ts of the component Code Execution Sandbox. Such manipulation of the argument vars leads to improper privilege management.
This vulnerability is documented as CVE-2026-70471. The attack can be executed remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
GHSA
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
ghsa·2026-08-04
CVE-2026-70471 [HIGH] CWE-863 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
## Finding — Unauthorized Workspace Variables disclosure via $vars injection (bypasses variables:view)
### What’s wrong (code locations)
- Variables for the active workspace are fetched without checking “variables:view” at this call site: flowise-src/
packages/components/src/utils.ts:932
- Runtime variables are resolved from server environment variables: flowise-src/packages/components/src/utils.ts:976
- $vars is always injected into the code execution sandbox: flowise-src/packages/components/src/utils.ts:1782
- The official Variables API is permission-protected (contrast): flowise-src/packages/server/src/routes/variables/
index.ts:11
### Why it is a privilege boundary bypass
A user/API key might be denied var
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-04
Published