p PatchFirst

PatchFirst · Latest vulnerabilities

flowise 3.1.3: known vulnerabilities

Known vulnerabilities affecting flowise 3.1.3: 1. Compare the fixes below with your installed release.

RSS ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2026-73603

    Medium · CVSS 6.3EPSS 0.33%Fix available

    Flowise before 3.1.4 Credential Abuse via Text-to-Speech

    Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to abuse private chatflow TTS credentials. Unauthenticated attackers can generate unlimited text-to-speech audio using stored OpenAI or ElevenLabs API keys by providing a valid chatflow UUID, incurring costs on the chatflow owner's account.

    flowiseNode.js
    • Update to 3.1.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →