GHSA-728h-4mwj-f2p4: FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover

Summary

The FlowiseAI CustomTemplate create and update paths in packages/server/src/services/marketplaces/index.ts copy the full request body onto the entity with Object.assign(newTemplate, body) and no field allowlist. A client-supplied workspaceId, and on create an id, is therefore persisted, letting any authenticated member who can edit a customtemplate move it into another workspace by UUID. The advisory rates this High and notes that workspace UUIDs are often exposed in API responses, which makes target enumeration simple.

Mitigation

Fixed in PR https://github.com/FlowiseAI/Flowise/pull/6129, which applies an explicit field allowlist pattern to the CustomTemplate create and update paths, matching commit 840d2ae for DocumentStore.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
• CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
• HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
• InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek