CVE-2026-41279: Flowise unauthenticated text-to-speech endpoint exposes stored API credentials

Summary

CVE-2026-41279 affects Flowise before 3.1.0. The text-to-speech generation endpoint POST /api/v1/text-to-speech/generate is whitelisted and requires no authentication, and it accepts a credentialId in the request body. When called without a chatflowId, it uses that credentialId to decrypt the stored credential, such as an OpenAI or ElevenLabs API key, and generate speech. The GitHub CNA rates it CVSS 4.0 8.2 HIGH, classified as CWE-639 Authorization Bypass Through User-Controlled Key.

Mitigation

Fixed in 3.1.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News