CVE-2025-71338 | Flowise process file inclusion (GHSA-8vvx-qvq9-5948)

June 26, 2026 Yanac

A vulnerability was found in Flowise. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v1/document-store/loader/process. The manipulation leads to file inclusion.

This vulnerability is referenced as CVE-2025-71338. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More