CVE-2026-56273: Flowise before 3.1.0 contains a path traversal vulnerability in Faiss and SimpleStore vector store implementations that

Flowise versions before 3.1.0 contain a path traversal vulnerability (a flaw where attackers can access files outside the intended directory) in its Faiss and SimpleStore vector store (systems that store and retrieve AI embeddings, which are numerical representations of data) implementations. Attackers who have valid API tokens can exploit unsanitized basePath parameters to write data to any location on the filesystem, potentially leading to code execution or data theft.