{"data":{"id":"5790f1e8-11eb-4dc5-938f-98ffc6074b2d","title":"CVE-2026-41279: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the…","summary":"CVE-2026-41279 affects Flowise before 3.1.0. The text-to-speech generation endpoint POST /api/v1/text-to-speech/generate is whitelisted and requires no authentication, and it accepts a credentialId in the request body. When called without a chatflowId, it uses that credentialId to decrypt the stored credential, such as an OpenAI or ElevenLabs API key, and generate speech. The GitHub CNA rates it CVSS 4.0 8.2 HIGH, classified as CWE-639 Authorization Bypass Through User-Controlled Key.","solution":"Fixed in 3.1.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41279","publishedAt":"2026-04-23T20:16:16.687Z","cveId":"CVE-2026-41279","cweIds":["CWE-639"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flowise@<= 3.0.13 (fixed: 3.1.0)"],"affectedPackageNames":["flowise"],"affectedPackageRefs":["npm:flowise"],"affectedVendors":[],"affectedVendorsRaw":["Flowise","OpenAI","ElevenLabs"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flowise unauthenticated text-to-speech endpoint exposes stored API credentials","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00261,"epssCheckedAt":"2026-11-09T12:10:46.212Z","kevDateAdded":null,"advisoryAliases":["GHSA-5fw2-mwhh-9947"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:10.780Z","patchAvailable":true,"disclosureDate":"2026-04-23T20:16:16.687Z","fixReleasedAt":"2026-03-16T14:47:16.783Z","daysToFix":-38,"fixCheckedAt":"2026-10-29T21:37:26.934Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.0","matchedVersion":"3.1.0","fixReleasedAt":"2026-03-16T14:47:16.783Z","daysToFix":-38,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:26.788Z"}]}}