CVE-2026-46441: Flowise mass assignment in assistant update endpoint allows workspace

Summary

CVE-2026-46441 is a mass assignment vulnerability in the assistant update endpoint of FlowiseAI, a drag and drop interface for building customized large language model flows, in versions prior to 3.1.2. Authenticated users can change server-controlled properties such as workspaceId, createdDate and updatedDate. Because the endpoint lacks server-side validation and authorization checks, an attacker can reassign assistants to arbitrary workspaces, breaking tenant isolation in multi-workspace environments.

Mitigation

Fixed in version 3.1.2.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumCVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loadingSimilar attack · NVD/CVE Database
• MediumCVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argumentSimilar attack · NVD/CVE Database
• MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
• HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
• HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database