CVE-2026-91933

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.4

Description Authenticated users can access tools from ChatFlows in other workspaces due to a failure to enforce workspace-level authorization checks in the openai-realtime endpoints. By providing an unscoped chatflowid variable, an attacker can use GET and POST requests to retrieve tool definitions and execute tools from victim workspaces, which may lead to external side effects and the exposure of sensitive tool outputs. This issue has been exploited in real-world incidents.

Recommendations Update to version 3.1.4 or later.