MediumVulnerability
GHSA-rwrp-9823-p2xq: Flowise: Incomplete Credential Redaction Exposes Secrets via API
- Identifier
- GHSA-rwrp-9823-p2xq
- Published
- Record updated
- Affected
- flowise <= 3.1.2
- Fixed in
- 3.1.3
- released June 25, 2026, 40 days before disclosure
Summary
The GET /api/v1/credentials/:id endpoint in Flowise v3.0.13 returns decrypted credential data in the plainDataObj field. The redactCredentialWithPasswordType() function masks only fields declared as type 'password', so string-type fields such as MongoDB connection URLs, Google service account JSON with RSA private keys, and AWS access keys are returned in plaintext. Any authenticated user with the credentials:view permission can retrieve these secrets for any credential in their workspace.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- flowisenpmLLM dependency since 2024-03-12
Related items
- MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
- LowExtracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation MetricsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoMCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement StudySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- MediumHow We Took Over ChatGPT AccountsSimilar attack · Simon Willison's Weblog
- Medium“Black October” for AI Developer PlatformsSimilar attack · Wiz Research Blog