CVE-2026-46478

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, DatasetRow create and update mass-assignment allows cross-workspace row takeover. This issue has been patched in version 3.1.2.

Score

CVSS 3.1 8.8 High

Status

Analyzed - security-advisories@github.com

Published

2026-06-08

Last modified

2026-06-09

Weaknesses

CWE-915

Affected products

• Flowise (Flowiseai)

References

• https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.2
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7j65-65cr-6644