Multi-Tenant Vulnerability in Flowise Drag & Drop Interface

CVE-2026-70472

What is CVE-2026-70472?

Flowise, a drag & drop user interface to build customized large language model flows, harbors a vulnerability in its openai-assistants-vector-store endpoints. Unauthorized access can occur because prior to version 3.1.3, these endpoints accepted a client-controlled credential parameter and did not verify if the provided credential belonged to the invoked workspace. This oversight allows an attacker who knows the credential ID of another workspace to access OpenAI APIs using that workspace's OpenAI key. Consequently, the attacker can read, modify, or delete vector stores and files associated with the victim's account, leading to potential billing implications and breaches of multi-tenant security. This vulnerability was addressed in version 3.1.3, highlighting the importance of stringent workspace verification.

References