CVE-2025-26319: Flowiseai Flowise

Critical severity, CVSS 9.8. EPSS: 55.9% chance of exploitation in the next 30 days.

FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

Affected products

• Flowiseai Flowise: version 2.2.6 only

Published 2025-03-04. Last modified 2026-09-30.