{"data":{"id":"ddf259b7-4131-420e-ac62-17a7749c5b09","title":"GHSA-cwc3-p92j-g7qm: Flowise has IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration","summary":"GHSA-cwc3-p92j-g7qm describes an Insecure Direct Object Reference in the PUT /api/v1/loginmethod endpoint of the Flowise platform. The endpoint accepts an organizationId from the JSON body and updates that organization's record without checking that the authenticated user owns it or has admin rights, so any low-privileged user, including Free plan users, can overwrite another organization's SSO configuration. The source states this enables Account Takeover by replacing the victim's OAuth credentials with attacker-controlled ones, and enabling Enterprise-only SSO features without a license.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-cwc3-p92j-g7qm","publishedAt":"2026-03-06T22:20:50.000Z","cveId":"CVE-2026-30823","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":["flowise@<= 3.0.12 (fixed: 3.0.13)"],"affectedPackageNames":["flowise"],"affectedPackageRefs":["npm:flowise"],"affectedVendors":[],"affectedVendorsRaw":["Flowise"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00467,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-cwc3-p92j-g7qm"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-03T14:06:55.481Z","daysToFix":-31,"fixCheckedAt":"2026-10-29T21:40:06.165Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"flowise","fixedVersion":"3.0.13","matchedVersion":"3.0.13","fixReleasedAt":"2026-02-03T14:06:55.481Z","daysToFix":-31,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:06.010Z"}]}}