Flowise · Flowise · CVE-2025-71327
**Name of the Vulnerable Software and Affected Versions**
Flowise (affected versions not specified)
**Description**
An authentication bypass exists due to missing access control and improper authentication enforcement on the registration route. This allows unauthenticated remote attackers to use the '/api/v1/account/register' endpoint to create arbitrary user accounts. Once an account is created, the attacker can log in and gain full API access, potentially leading to unauthorized data access and the takeover of workflows, integrations, and connected resources.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.