CVE-2024-36421: Flowise CORS misconfiguration allowing arbitrary origin access

Summary

CVE-2024-36421 affects Flowise, a drag and drop interface for building customized large language model flows, in version 1.4.3. A CORS misconfiguration sets Access-Control-Allow-Origin to all, so arbitrary origins can connect to the website. In the default unauthenticated configuration, those origins may make requests to Flowise and steal information from the user. The flaw may be chained with a path injection to let an attacker without Flowise access read arbitrary files from the Flowise server.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
• LowExtracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation MetricsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement StudySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumHow We Took Over ChatGPT AccountsSimilar attack · Simon Willison's Weblog
• Medium“Black October” for AI Developer PlatformsSimilar attack · Wiz Research Blog