CVE-2026-12821

Name of the Vulnerable Software and Affected Versions FlowiseAI Flowise versions prior to 3.1.3

Description A path traversal issue exists in the S3 Document Loader component, specifically within an unknown function of the file packages/components/nodes/documentloaders/S3/S3.ts. This flaw allows a remote attacker to perform a manipulation that leads to unauthorized access to files or directories outside the intended folder.

Recommendations Update to a version later than 3.1.2. As a temporary workaround, restrict the use of the S3 Document Loader component until a patch is applied.