GHSA-hmg2-jjjx-jcp2: FlowiseAI: Vector Store No Permission Checks

Summary

FlowiseAI's OpenAI Assistants vector store routes at packages/server/src/routes/openai-assistants-vector-store/index.ts have no checkAnyPermission() middleware on any CRUD operation. Any authenticated user, regardless of role, can create, update, or delete vector stores, upload files to them, and delete files. The source rates the issue HIGH (CVSS ~8.1) under CWE-306 and says the impact includes uploading malicious files and exfiltrating stored documents.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Topics

• Retrieval-augmented generation

Related items

• MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
• MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database
• MediumCVE-2026-100609: Flowise credential lookup by ID bypasses workspace isolationSame vendor · NVD/CVE Database
• MediumCVE-2026-100528: OpenClaw credential exposure to wrong endpoint after model config hot reloadSame vendor · NVD/CVE Database
• MediumCVE-2025-14486: PixelPlay WordPress plugin unauthorized API key deletion via clear_api_typeSame vendor · NVD/CVE Database