CVE-2026-46443: Flowise credential retrieval exposes encrypted data via credentialName filter

Summary

CVE-2026-46443 affects Flowise, a drag and drop user interface for building customized large language model flows, prior to version 3.1.2. When credentials are fetched with a credentialName filter parameter, the encryptedData field is not stripped from the response, although it is omitted when no filter is used. The weakness is classified as CWE-200, Exposure of Sensitive Information to an Unauthorized Actor, and GitHub rates it CVSS 4.0 7.0 HIGH with network attack vector and low privileges required.

Mitigation

Fixed in version 3.1.2.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
• LowExtracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation MetricsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement StudySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumHow We Took Over ChatGPT AccountsSimilar attack · Simon Willison's Weblog
• Medium“Black October” for AI Developer PlatformsSimilar attack · Wiz Research Blog