GHSA-chm3-vqcf-52rx: Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
highvulnerabilityLLM-Specific
security
Summary
Flowise has a cross-workspace credential vulnerability where attackers can access other users' OpenAI API keys if they know the credential ID. The server doesn't check whether credentials belong to the attacker's workspace before using them, allowing unauthorized access to victim OpenAI accounts and vector stores (collections of data used for AI search and retrieval).
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Patch Available
Yes
Disclosure Date
August 4, 2026
Classification
Attack Type
Data Extraction
Attack SophisticationTrivial
Impact (CIA+S)
confidentialityintegrity
Affected Vendors
OpenAI
Affected Packages
flowise@<= 3.1.2 (fixed: 3.1.3)
Related Issues
Monthly digest — independent AI security research
Original source: https://github.com/advisories/GHSA-chm3-vqcf-52rx
First tracked: August 4, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 95%