CVE-2026-70472: Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
These endpoints accept a client-controlled credential parameter. The server loads credentials by id and uses them directly, without checking whether that credential belongs to the caller’s workspace. If an attacker knows another workspace’s credentialId, they can use that workspace’s OpenAI key.
References
- github.com/FlowiseAI/Flowise/commit/d81483b70c997ddf981acc9c49fbd9a02fa345cd
- github.com/FlowiseAI/Flowise/pull/6170
- github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3
- github.com/FlowiseAI/Flowise/security/advisories/GHSA-chm3-vqcf-52rx
- github.com/advisories/GHSA-chm3-vqcf-52rx
- nvd.nist.gov/vuln/detail/CVE-2026-70472
Code Behaviors & Features
Detect and mitigate CVE-2026-70472 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →