HighVulnerability
GHSA-wxrr-jp8m-qq7f: FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover
- Identifier
- GHSA-wxrr-jp8m-qq7f
- Published
- Record updated
- Affected
- flowise <= 3.1.1
- Fixed in
- 3.1.2
- released April 14, 2026, 30 days before disclosure
Summary
FlowiseAI's Evaluator create and update handlers in `packages/server/src/Interface.Evaluation.ts` copy the request body onto the entity with `Object.assign(newEvaluator, body)` and no field allowlist. A client-supplied `workspaceId` therefore persists on the row, letting any authenticated workspace member move an evaluator into another workspace. The advisory rates this High severity.
Mitigation
Already fixed in PR https://github.com/FlowiseAI/Flowise/pull/6050 (allowlist pattern applied).
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- flowisenpmLLM dependency since 2024-03-12
Related items
- MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
- MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
- MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
- CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database