---
cve: "CVE-2026-100609"
severity: "HIGH"
cvss: 7.6
epss: "0.2%"
vendor: "FlowiseAI"
kev: false
exploited: false
published: "2026-09-26 14:16:41"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-30T08:03:02+02:00"
---

# CVE-2026-100609

> 7.6 HIGH · 🧪 PoC

## Beschreibung

Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOneBy({ id: credentialId }) with no workspaceId condition) in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant (GET /api/v1/openai-assistants and /api/v1/openai-assistants/:id), uploadFilesToAssistant (POST /api/v1/openai-assistants-file/upload/), deleteAssistant (DELETE /api/v1/assistants/:id, reachable by first importing a poisoned assistant row via POST /api/v1/export-import/import), and the shared helper used by getVoices (GET /api/v1/text-to-speech/voices). An authenticated user of one workspace can supply a credential UUID belonging to another workspace, causing the server to decrypt and use that workspace's OpenAI or ElevenLabs API key on the attacker's behalf. No patched version was available at the time of publication.

## CNA-Record (Kanon, cvelistV5)

- CNA: **VulnCheck**
- State: PUBLISHED
- Stand: 2026-09-26 13:22:51
- CNA-CVSS: **7.6** (`CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N`)

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |

## Patch verfügbar (OSV)

- a65f81bb43ef66d3ce734bf0dff4223ae8041c95 (Commit)

## BSI-Hinweise (deutsch)

- [Flowise: Mehrere Schwachstellen](https://wid.cert-bund.de/portal/wid/sicherheitshinweis/WID-SEC-W-2026-3313) — _BSI-Einstufung: hoch_
  Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um seine Privilegien zu erhöhen, Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren oder offenzulegen.

## Referenzen

- <https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c>
- <https://www.vulncheck.com/advisories/flowise-through-3.1.4-insecure-direct-object-reference-via-credential>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-100609) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_