CVE-2026-46480

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluator create and update mass-assignment allows cross-workspace evaluator takeover. This issue has been patched in version 3.1.2.

Score

CVSS 3.1 8.8 High

Status

Analyzed - security-advisories@github.com

Published

2026-06-08

Last modified

2026-06-08

Weaknesses

CWE-915

Affected products

• Flowise (Flowiseai)

References

• https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.2
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wxrr-jp8m-qq7f