Flowise is a drag & drop user interface to build a customized large language model flow.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 7, 2026 · NIST NVD

   Detected

   Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal database fields when creating leads. This issue has been patched in version 3.0.13.

2. Jun 17, 2026 · NIST NVD

   Updated

   Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal database fields when creating leads. This issue has been patched in version 3.0.13.

Affected

• cpe flowiseai/flowiseversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-30822

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-30822

  Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal database fields when creating leads. This issue has been patched in version 3.0.13.

  nvd.nist.gov

References

• Product · github.com
• Exploit · github.com