← Database

CVE-2025-26319

CRITICAL CVSS: 9.8 Published: 2025-03-04 Modified: 2026-06-17

Description

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

Affected Platforms

Flowiseai Flowise

Weakness Type

CWE-434

References