{"data":{"id":"c89f11a7-a283-4635-a897-4dbfc69ff1c9","title":"GHSA-88pr-878c-24wf: Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys                                                                                                  ","summary":"Flowise on current main lets an authenticated user with documentStores:preview-process permission trigger the S3 Directory document loader with attacker-controlled S3 object keys. The loader joins each key to a temporary directory with path.join and writes the object bytes to disk without validating ../ traversal sequences, and cleanup removes only the original temporary directory, so the written files persist on the host. A related variant in the S3File loader (fileProcessingMethod = unstructured) shares the same root cause.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-88pr-878c-24wf","publishedAt":"2026-08-04T17:43:45.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flowise@<= 3.1.2 (fixed: 3.1.3)","flowise-components@<= 3.1.2 (fixed: 3.1.3)"],"affectedPackageNames":["flowise","flowise-components"],"affectedPackageRefs":["npm:flowise-components","npm:flowise"],"affectedVendors":[],"affectedVendorsRaw":["Flowise"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-88pr-878c-24wf"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-08-04T17:43:45.000Z","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-40,"fixCheckedAt":"2026-10-29T21:32:15.413Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:41:14.612Z","daysToFix":-40,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:15.265Z"},{"ecosystem":"npm","name":"flowise-components","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-40,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:15.265Z"}]}}