CVE-2026-41266: Flowise exposure of sensitive data through /api/v1/public-chatbotConfig/:id

Summary

CVE-2026-41266 affects Flowise, a drag and drop user interface for building customized large language model flows, prior to 3.1.0. The endpoint /api/v1/public-chatbotConfig/:id returns sensitive data, including API keys, HTTP authorization headers and internal configuration, without any authentication. An attacker who knows only a chatflow UUID can retrieve credentials stored in password type fields and HTTP headers, which leads to credential theft.

Mitigation

Fixed in 3.1.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• HighCVE-2026-97677: IBM Langflow OSS arbitrary file write and read by authenticated flow authorsSimilar attack · NVD/CVE Database
• MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
• MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
• MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
• MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog