CyberRota Analysis
AI-GeneratedVersions 2.2.4 through 3.1.4 of Flowise are vulnerable due to a missing authorization flaw in the POST /api/v1/openai-assistants-file/download endpoint, allowing unauthenticated attackers to access private files by bypassing session and API key verification. This vulnerability can lead to unauthorized retrieval of sensitive data from any chatflow, including those belonging to other organizations. Organizations using affected versions should prioritize remediation to protect against potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attackers to access private files by exploiting the endpoint's inclusion in the global authentication whitelist, which bypasses all session and API key verification. Attackers can supply valid chatflowId, chatId, and fileName identifiers to retrieve files from any chatflow on the instance, including private chatflows belonging to other workspaces or organizations.