{"data":{"id":"7878aaee-7d60-4d7e-be81-bdf6735cea8e","title":"CVE-2026-100609: Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on…","summary":"Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace, across several code paths including the OpenAI assistants endpoints, the file upload and delete routes, and the text-to-speech voices helper. An authenticated user of one workspace can supply a credential UUID from another workspace, so the server decrypts and uses that workspace's OpenAI or ElevenLabs API key on the attacker's behalf. No patched version was available at the time of publication.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-100609","publishedAt":"2026-09-26T14:16:41.297Z","cveId":"CVE-2026-100609","cweIds":["CWE-639"],"cvssScore":"6.8","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Flowise","OpenAI","OpenAI Assistants API","ElevenLabs"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flowise credential lookup by ID bypasses workspace isolation","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00295,"epssCheckedAt":"2026-11-11T12:09:48.052Z","kevDateAdded":null,"advisoryAliases":["GHSA-2jfx-whrm-9j49"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:33.408Z","patchAvailable":null,"disclosureDate":"2026-09-26T14:16:41.297Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}