Critical Flowise Flaw Gives Attackers Full Server Control - Infosecurity Magazine

A critical vulnerability in the open-source AI platform Flowise, tracked as CVE-2026-40933, allows an attacker to gain full server control when a logged-in user imports a malicious workflow file. The flaw was disclosed by security researchers and reported by Infosecurity Magazine. Flowise is a low-code platform for building applications powered by large language models.

The vulnerability requires that the target user is authenticated to the Flowise instance. An attacker can craft a workflow file that, when imported, executes arbitrary code on the underlying server. No additional authentication or user interaction beyond the import action is needed.

The article notes that a proof-of-concept exploit is expected to be released. Users of self-hosted Flowise instances are advised to apply any available patches from the maintainers and to avoid importing workflow files from untrusted sources. The discovery highlights ongoing security concerns in the rapidly growing ecosystem of open-source AI tools, where features are often prioritised over security hardening.