CVE-2025-71324
Description
Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.
How to fix
- flowiseai flowise3.0.6 or later
- flowise3.0.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flowiseai flowise | v < 3.0.6 | 3.0.6 |
| flowisenpm | 3.0.5 ≤ v < 3.0.6 | 3.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.