CVE-2025-26319

CVE-2025-26319

This page contains facts from public vulnerability sources. Check the original advisory before updating.

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

CVSS 9.8 · Critical · EPSS 55.9% · Public exploit

Published

2025-03-04T00:00:00.000Z

Updated

2025-03-05T16:45:28.920Z

Stack: node

Check your server →