high severity · published 2026-08-04
A caller can pass a credential id from another workspace to the openai-assistants-vector-store endpoints; Flowise decrypts that credential and uses it without any workspace check. An attacker who knows or guesses another workspace's credential id gets its decrypted contents, such as OpenAI API keys.
Fixed in: 3.1.3
CVE: CVE-2026-70472
Source: NVD
You are affected if the installed version is older than 3.1.3. Check the version you have and update to 3.1.3 or later. The fixed version is verified against a vendor or advisory source.
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 120 and your operating system.