CVE-2026-73604 | FlowiseAI Flowise up to 3.1.2 Credential Redaction /api/v1/credentials ID missing encryption

August 13, 2026 Yanac

A vulnerability was found in FlowiseAI Flowise up to 3.1.2 and classified as problematic. This affects an unknown function of the file /api/v1/credentials of the component Credential Redaction. Executing a manipulation of the argument ID can lead to missing encryption of sensitive data.

This vulnerability is handled as CVE-2026-73604. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More