HighVulnerability
GHSA-7g73-99r4-m4mj: FlowiseAI Vulnerable to Credential Data Leak
- Identifier
- GHSA-7g73-99r4-m4mj
- Published
- Record updated
- Affected
- flowise <= 3.1.1
- Fixed in
- 3.1.2
Summary
FlowiseAI's credentials service returns the encryptedData field when credentials are fetched with a credentialName filter, because the omit step runs only for unfiltered requests (packages/server/src/services/credentials/index.ts, lines 62-71). Authenticated users can read encrypted API keys, passwords and tokens for services such as OpenAI and AWS. The source says combining this with the encryption key file at ~/.flowise/encryption.key, written with default permissions, enables full credential theft.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- flowisenpmLLM dependency since 2024-03-12
Related items
- MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
- MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database
- MediumCVE-2026-100609: Flowise credential lookup by ID bypasses workspace isolationSame vendor · NVD/CVE Database
- MediumCVE-2026-100528: OpenClaw credential exposure to wrong endpoint after model config hot reloadSame vendor · NVD/CVE Database
- MediumCVE-2025-14486: PixelPlay WordPress plugin unauthorized API key deletion via clear_api_typeSame vendor · NVD/CVE Database