GHSA-4jpm-cgx2-8h37

Source

https://github.com/advisories/GHSA-4jpm-cgx2-8h37

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-4jpm-cgx2-8h37/GHSA-4jpm-cgx2-8h37.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-4jpm-cgx2-8h37

Aliases

CVE-2026-41266

Published

2026-04-16T21:44:49Z

Modified

2026-05-05T16:11:51Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
7.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator

Summary

Flowise: Sensitive Data Leak in public-chatbotConfig

Details

Summary

/api/v1/public-chatbotConfig/:id ep exposes sensitive data including API keys, HTTP authorization headers and internal configuration without any authentication. An attacker with knowledge just of a chatflow UUID can retrieve credentials stored in password type fields and HTTP headers, leading to credential theft and more.

Details

Knowledge of chatflow UUID can be obtained from embedded chat widgets, referrer headers or logs and it's the only prerequest.

getSinglePublicChatbotConfig function in packages/server/src/services/chatflows/index.ts returns the full flowData object without authorization check or data sanitization.

There is a comment as "Safe as public endpoint as chatbotConfig doesn't contain sensitive credential" but flowData does contain sensitive data such as:

type: 'password' fields are stored in plaintext (unstructuredAPIKey in S3File node). HTTP Authorization headers in POST / GET Requests nodes. Internal API endpoints and webhook URLs.

PoC

Add an S3 File node, set "File Processing Method" to "Unstructured".
Enter an API key in "Unstructured API KEY" field or add a Requests Post node with Authorization header.
Save the chatflow.

curl -s "https://localhost/api/v1/public-chatbotConfig/{CHATFLOW_UUID}"

Response:

{
  "flowData": "{...\"unstructuredAPIKey\":\"victim_key\"...\"requestsPostHeaders\":\"Bearer victim_token\"...}"
}

Impact

Impacts all Flowise Cloud users with chatflows containing password type fields or any HTTP headers. And self hosted Flowise instances exposed to the internet.

Database specific

{
    "cwe_ids": [
        "CWE-200",
        "CWE-522",
        "CWE-862"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-04-16T21:44:49Z",
    "nvd_published_at": "2026-04-23T20:16:15Z",
    "severity": "HIGH"
}

References

Affected packages

npm / flowise

Package

Name: flowise; View open source insights on deps.dev
Purl: pkg:npm/flowise

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.1.0

Database specific

last_known_affected_version_range

"<= 3.0.13"

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-4jpm-cgx2-8h37/GHSA-4jpm-cgx2-8h37.json"