Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-30823

Flowise: IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FlowiseAI Flowise

  • < 3.0.13affected

References