GHSA-jc5m-wrp2-qq38: Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password Endpoint
- Identifier
- GHSA-jc5m-wrp2-qq38
- Published
- Record updated
- Affected
- flowise <= 3.0.12
- Fixed in
- 3.0.13
- released February 3, 2026, 30 days before disclosure
Summary
Flowise's POST /api/v1/account/forgot-password endpoint returns the full user object, including id, name, email, status and timestamps, instead of a generic acknowledgment. No authentication is required, so an attacker who knows a valid email address can retrieve that user's personal data. The advisory rates the issue CVSS 3.1 3.7 (Low) under CWE-200.
Mitigation
Expected behavior per the source: the endpoint should return a generic response regardless of whether the email exists, such as {"message": "If this email exists, a password reset link has been sent."}. No fixed version is stated in the source text.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- flowisenpmLLM dependency since 2024-03-12
Related items
- MediumCVE-2026-121938: langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated…Similar attack · NVD/CVE Database
- InfoResidual Attribute Leakage Is an Interface: Auditing Privacy Evaluation After Text De-identificationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- MediumHundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake FeaturesSimilar attack · Wired (Security)
- MediumNew VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueSimilar attack · The Hacker News
- InfoAccessed, never disclosed: Silent access to protected health information by medical artificial intelligence agentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)