GHSA-mq53-pc65-wjc4: FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover
- Identifier
- GHSA-mq53-pc65-wjc4
- Published
- Record updated
- Affected
- flowise <= 3.1.1
- Fixed in
- 3.1.2
- released April 14, 2026, 30 days before disclosure
Summary
FlowiseAI's Evaluation create and update paths copy the request body into the entity with Object.assign(...) and no field allowlist. An authenticated workspace member can therefore send a workspaceId in the body, which is persisted and moves the evaluation into another workspace, along with any data it holds. The source says the flaw is fixed in PR 6050 using an allowlist pattern, matching the DocumentStore fix in commit 840d2ae.
Mitigation
Fixed in PR https://github.com/FlowiseAI/Flowise/pull/6050, which applies an explicit field allowlist to the Evaluation entity, matching commit 840d2ae for DocumentStore.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- flowisenpmLLM dependency since 2024-03-12
Related items
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
- CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
- MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
- HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
- InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek