CVE-2026-91933
Flowise before 3.1.4 Authorization Bypass via openai-realtime
- State
- Published
- Severity
- 7.6 High
- Published
- Sep 15, 2026
- Updated
- Sep 17, 2026
- Reserved
- Sep 15, 2026
Description
Flowise before 3.1.4 fails to enforce workspace-level authorization checks in openai-realtime endpoints, allowing authenticated users to access tools from ChatFlows in other workspaces by supplying an unscoped chatflowid. Attackers can invoke GET and POST requests to retrieve tool definitions and execute tools from victim workspaces, triggering external side effects and accessing sensitive tool outputs.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.6 High | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.1 High | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L | VulnCheck |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
FlowiseFlowiseAI |
|
References
- GitHub Security Advisory (GHSA-gggp-6qmf-xwwc)vendor-advisory
- VulnCheck Advisory: Flowise before 3.1.4 Authorization Bypass via openai-realtimethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.