MediumVulnerability
GHSA-8gj2-2cvc-6xx7: Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials
- Identifier
- GHSA-8gj2-2cvc-6xx7
- Published
- Record updated
- Affected
- flowise <= 3.1.3
- Fixed in
- 3.1.4
- released July 29, 2026, 6 days before disclosure
Summary
The unauthenticated `/api/v1/text-to-speech/generate` endpoint in Flowise accepts any `chatflowId` without checking whether the chatflow is public. An attacker who knows a valid chatflow UUID can use that chatflow's stored TTS credential (OpenAI or ElevenLabs API key) to generate unlimited text-to-speech audio. The costs fall on the chatflow owner's account.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- flowisenpmLLM dependency since 2024-03-12
Related items
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSame vendor · NVD/CVE Database
- MediumCVE-2026-113459: TYPO3 OpenAI API key exposed to backend users in page sourceSame vendor · NVD/CVE Database
- MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
- MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database