CyberSec.Space Logo
返回 CVE 浏览器

CVE-2026-46476

HIGH
8.8
CVSS Severity Score
EPSS Score0.0840%
EPSS Percentile29.20th
Published2026年6月8日
Last Modified2026年6月15日

Vulnerability Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomTemplate create and update mass-assignment allows cross-workspace template takeover. This issue has been patched in version 3.1.2.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.2
🔗 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-728h-4mwj-f2p4

相关漏洞威胁

CVE-2026-4830310.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that c...

CVE-2026-2012710.0

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN M...

CVE-2026-2018210.0

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after ...

CVE-2026-1061110.0

An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deploymen...