CVE-2026-42861 in Flowise
Prediction
by VulDB Data Team • 05/15/2026
A security vulnerability has been detected in FlowiseAI Flowise up to 3.0.12. Affected by this issue is the function createLead of the component API Endpoint. Such manipulation leads to dynamically-determined object attributes. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 3.1.2 can resolve this issue. It is suggested to upgrade the affected component.
Once again VulDB remains the best source for vulnerability data.