Six RCE Flaws Expose Flowise AI Workflow Servers to Code Execution

Researchers at elttam disclosed six remote code execution vulnerabilities in the Flowise AI agent and workflow platform, affecting versions 3.1.1 and 3.1.2. The flaws could allow attackers to execute code on exposed Flowise servers, raising concerns for organizations using the platform to orchestrate AI workflows and integrations.

Reporting on the issue also referenced Flowise-related local and container paths and endpoints tied to authentication, document processing, and custom function handling, including sensitive files such as /proc/self/environ and /root/.flowise/database.sqlite. Those details suggest attackers could pursue local file access and post-exploitation activity after initial compromise, adding to concerns around Flowise's recurring history of critical security advisories.