CVE-2026-70478 | FlowiseAI Flowise up to 3.1.2 OAuth2 improper authentication

August 4, 2026 Yanac

A vulnerability described as critical has been identified in FlowiseAI Flowise up to 3.1.2. This issue affects some unknown processing of the component OAuth2. The manipulation results in improper authentication.

This vulnerability is known as CVE-2026-70478. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More