AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

GHSA-8r8h-6vcc-xhrv: Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure

highvulnerability

security

Source: GitHub Advisory DatabaseAugust 4, 2026CVE-2026-70471

Summary

Flowise has a privilege bypass vulnerability where users without permission to view workspace variables can still access them through the /api/v1/node-custom-function endpoint, which automatically injects $vars (a map containing all workspace variable names and values, including secrets from environment variables) into custom JavaScript code without checking permissions.

Solution / Mitigation

The source recommends: 'Do not inject $vars unless the caller is authorized: enforce variables:view before injecting $vars, or inject only an explicit allowlist of variables needed for the function.' It also suggests considering disabling or restricting runtime type variables (which map to process.env values) in self-hosted environments.