High severity7.1NVD Advisory· Published Sep 15, 2026

CVE-2026-91933

Description

Flowise before 3.1.4 fails to enforce workspace-level authorization checks in openai-realtime endpoints, allowing authenticated users to access tools from ChatFlows in other workspaces by supplying an unscoped chatflowid. Attackers can invoke GET and POST requests to retrieve tool definitions and execute tools from victim workspaces, triggering external side effects and accessing sensitive tool outputs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Flowiseai/Flowisellm-fuzzy
Range: <3.1.4

Patches

Vulnerability mechanics

References

github.com/FlowiseAI/Flowise/security/advisories/GHSA-gggp-6qmf-xwwcnvd
www.vulncheck.com/advisories/flowise-before-3.1.4-authorization-bypass-via-openai-realtimenvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000