CVE-2026-46475

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.2

Description A mass assignment issue exists in the assistant create and update processes. The application uses Object.assign() to copy the request body into the Assistant entity without an explicit field allowlist, allowing a client to overwrite sensitive fields. Specifically, an authenticated user can manipulate the workspaceId or id variables via the PUT /api/v1/assistants/<id> endpoint. This allows an attacker to move an assistant to a different workspace by specifying a target workspace UUID, leading to cross-workspace assistant takeover and Insecure Direct Object Reference (IDOR). This exposes the assistant's LLM configuration, system prompts, tool lists, and credentials to the destination workspace.

Recommendations Update to version 3.1.2. As a temporary workaround, restrict access to the PUT /api/v1/assistants/<id> endpoint or monitor request bodies for unauthorized changes to the workspaceId and id variables.