{"data":{"id":"2ae28c6c-6cc9-454e-bb83-fb6a2c9fb651","title":"CVE-2026-91933: Flowise before 3.1.4 fails to enforce workspace-level authorization checks in openai-realtime endpoints, allowing…","summary":"CVE-2026-91933 affects Flowise before 3.1.4. Its openai-realtime endpoints do not enforce workspace-level authorization checks, so an authenticated user can supply an unscoped chatflowid to reach tools from ChatFlows in other workspaces. Through GET and POST requests, an attacker can retrieve tool definitions, execute tools in victim workspaces, trigger external side effects, and read sensitive tool outputs.","solution":"Fixed in 3.1.4.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-91933","publishedAt":"2026-09-15T16:17:44.170Z","cveId":"CVE-2026-91933","cweIds":["CWE-639"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Flowise","ChatFlows","openai-realtime"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flowise openai-realtime endpoints allow cross-workspace tool access","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00352,"epssCheckedAt":"2026-11-04T00:12:27.710Z","kevDateAdded":null,"advisoryAliases":["GHSA-g5x4-4x4f-qgq9"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T00:10:46.241Z","patchAvailable":null,"disclosureDate":"2026-09-15T16:17:44.170Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}