CVE-2026-100607

7.7 HIGHpublic exploit available

Published 2026-09-26 · Updated 2026-09-28

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifier bindings, allowing attackers to authenticate as any existing user by claiming their email at any configured SSO provider. Attackers can gain complete account access including chatflows, credentials, and API keys by authenticating through a different SSO provider or local password than the victim's original registration method.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Weaknesses

CWE-287

Public exploit & PoC references

https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr

All references

https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr
https://www.vulncheck.com/advisories/flowise-through-3.1.4-authentication-bypass-via-email-only-sso
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2025-43936
HIGHCVE-2026-100606PoC
HIGHCVE-2026-100684PoC
HIGHCVE-2026-100709PoC
HIGHCVE-2026-100746PoC
HIGHCVE-2026-100871PoC
MEDIUMCVE-2026-100876PoC
CRITICALCVE-2026-100886PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.