CVE-2026-46479: Flowise mass-assignment flaw allows cross-workspace takeover

Summary

CVE-2026-46479 affects Flowise, a drag and drop user interface for building customized large language model flows. Prior to version 3.1.2, the evaluation create and update functions are vulnerable to mass-assignment, which allows cross-workspace evaluation takeover. The issue is classified under CWE-915 and carries a CVSS 4.0 score of 7.7 (HIGH) from GitHub, with the NVD assessment not yet provided.

Mitigation

Fixed in version 3.1.2.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumCVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loadingSimilar attack · NVD/CVE Database
• MediumCVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argumentSimilar attack · NVD/CVE Database
• MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
• HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
• HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database