CVE-2025-26319
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 55.9%
- 99th pct
- KEV
- No
- Class
- oss containerizable
- CWE-434
Description
FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.
Affected packages
| npm | flowise | 0 → ∞ |
References
Status: profiled · ingested 2026-09-30T18:00:02.000Z