← Database

CVE-2024-8181

CRITICAL CVSS: 9.8 Published: 2024-08-27 Modified: 2026-06-17

Description

An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.

Affected Platforms

Flowiseai Flowise

Weakness Type

CWE-287, CWE-287

References