CyberRota Analysis
AI-GeneratedFlowise versions prior to 3.1.4 are vulnerable due to inadequate workspace-level authorization checks in the openai-realtime endpoints, enabling authenticated users to exploit unscoped chatflow IDs. This flaw allows attackers to perform GET and POST requests to access and execute tools from other users' workspaces, potentially leading to unauthorized access to sensitive data and triggering external side effects. Organizations using Flowise should prioritize patching this vulnerability to protect against potential data breaches and unauthorized actions within their environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise before 3.1.4 fails to enforce workspace-level authorization checks in openai-realtime endpoints, allowing authenticated users to access tools from ChatFlows in other workspaces by supplying an unscoped chatflowid. Attackers can invoke GET and POST requests to retrieve tool definitions and execute tools from victim workspaces, triggering external side effects and accessing sensitive tool outputs.