Training data and privacy

The /api/v1/public-chatbotConfig/:id endpoint in Flowise returns the full flowData object without authentication or sanitization, through the getSinglePublicChatbotConfig function in packages/server/src/services/chatflows/index.ts. An attacker who knows only a chatflow UUID, which can be obtained from embedded chat widgets, referrer headers or logs, can retrieve plaintext password-type fields such as unstructuredAPIKey and HTTP Authorization headers. The impact covers all Flowise Cloud users with such chatflows and self-hosted instances exposed to the internet.