CVE-2026-70474
published 2026-08-04CVE-2026-70474: Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise has three OAuth2 credential…
PriorityP351high7.6CVSS 4.0
AVNACLATPPRLUINVCHVIHVANSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.30%
22.8th percentile
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise has three OAuth2 credential endpoints that look up credentials by id alone with no workspaceId filter. The authorize, callback, and refresh handlers query the Credential table by id only; callback and refresh are whitelisted from authentication. This allows any authenticated user to initiate OAuth2 flows against credentials belonging to other workspaces, allows an unauthenticated attacker to forge OAuth2 callbacks to overwrite tokens in any credential, and allows an unauthenticated attacker to refresh tokens for any credential. The affected routes include /api/v1/oauth2-credential/authorize/, /api/v1/oauth2-credential/callback?code=ATTACKER_AUTH_CODE&state=, and /api/v1/oauth2-credential/refresh/. This issue is fixed in version 3.1.3.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| flowiseai | flowise | < 3.1.3 | 3.1.3 |
| flowiseai | flowise | >= 0 < 3.1.3 | 3.1.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
FlowiseAI Flowise up to 3.1.2 OAuth2 Credential Endpoints improper authorization
vuldb·2026-08-04·CVSS 7.6
CVE-2026-70474 [HIGH] FlowiseAI Flowise up to 3.1.2 OAuth2 Credential Endpoints improper authorization
A vulnerability identified as critical has been detected in FlowiseAI Flowise up to 3.1.2. The affected element is an unknown function of the component OAuth2 Credential Endpoints. The manipulation leads to improper authorization.
This vulnerability is traded as CVE-2026-70474. It is possible to initiate the attack remotely. There is no exploit available.
You should upgrade the affected component.
GHSA
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
ghsa·2026-08-04
CVE-2026-70474 [HIGH] CWE-863 Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
## Summary
Three OAuth2 credential endpoints look up credentials by `id` alone with no `workspaceId` filter. Two of these endpoints (`callback`, `refresh`) are whitelisted from all authentication. This allows:
1. **Cross-workspace credential access** — Any authenticated user can initiate OAuth2 flows against credentials belonging to other workspaces.
2. **Unauthenticated token injection** — An unauthenticated attacker can forge OAuth2 callbacks to overwrite tokens in any credential.
3. **Unauthenticated token refresh** — An unauthenticated attacker can refresh tokens for any credential.
---
## Root Cause
### Vulnerable code: no workspace scoping
All three OAuth2 handlers query the `Credential` table by `id` only:
**`packages/
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-04
Published