CVE-2024-8181

Flowise Authentication Bypass PUBLISHED

Description (CNA)

An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.

Affected (CNA)

Vendor / product	Versions
FlowiseAI / Flowise	affected 1.8.2

CWE

No CWE identifiers supplied.

References

https://tenable.com/security/research/tra-2024-33

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.