GHSA-7j65-65cr-6644: FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

Summary

GHSA-7j65-65cr-6644 affects FlowiseAI's DatasetRow create and update paths in packages/server/src/services/dataset/index.ts. The code copies the request body onto the entity with Object.assign without a field allowlist, so a client-supplied workspaceId persists on the row. An authenticated workspace member can move a datasetrow into another workspace, exposing its contents there, and the source does not describe the fix's specific version beyond the referenced pull request.

Mitigation

Already fixed in PR https://github.com/FlowiseAI/Flowise/pull/6051, which applies an explicit field allowlist pattern matching commit 840d2ae for DocumentStore.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
• CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
• HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
• InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek