A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packages/server/src/enterprise/services/account.service.ts of the component API Response Handler. The manipulation results in information disclosure. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is told to be difficult. You should upgrade the affected component.
References
| Link | Resource |
|---|---|
| https://gist.github.com/YLChen-007/50a553f09aa1c7c04ce18cec13986a91 | Exploit Third Party Advisory |
| https://vuldb.com/submit/777656 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/361273 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/361273/cti | Permissions Required VDB Entry |
| https://gist.github.com/YLChen-007/50a553f09aa1c7c04ce18cec13986a91 | Exploit Third Party Advisory |
Configurations
History
07 May 2026, 15:04
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Flowiseai flowise
Flowiseai |
|
| CPE | cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:* | |
| CWE | CWE-312 | |
| References | () https://gist.github.com/YLChen-007/50a553f09aa1c7c04ce18cec13986a91 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/submit/777656 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/361273 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/361273/cti - Permissions Required, VDB Entry |
06 May 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/YLChen-007/50a553f09aa1c7c04ce18cec13986a91 - |
06 May 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 13:16
Updated : 2026-05-07 15:04
NVD link : CVE-2026-8026
Mitre link : CVE-2026-8026
CVE.ORG link : CVE-2026-8026
JSON object : View
Products Affected
flowiseai
- flowise