CVE-2025-71327

Name of the Vulnerable Software and Affected Versions Flowise (affected versions not specified)

Description An authentication bypass exists due to missing access control and improper authentication enforcement on the registration route. This allows unauthenticated remote attackers to use the '/api/v1/account/register' endpoint to create arbitrary user accounts. Once an account is created, the attacker can log in and gain full API access, potentially leading to unauthorized data access and the takeover of workflows, integrations, and connected resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.