← Back to browse · API

CVE-2025-26319

Severity
CRITICAL
CVSS
9.8
EPSS
0.55568
Risk score
58.65
CISA KEV
No
PoC
No
Published
2025-03-04
Modified
2025-03-05
First seen
2026-08-07
Aliases
EUVD-2025-6168, GHSA-69JQ-QR7W-J7QH
Products
n/a:n/a n/a
Sources
euvd EUVD-2025-6168

Description

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

References