FlowiseAI Flowise 3.0.7 unrestricted upload

Summaryinfo

A vulnerability was found in FlowiseAI Flowise 3.0.7. It has been declared as critical. Affected by this issue is some unknown functionality. Such manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2025-61687. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in FlowiseAI Flowise 3.0.7. It has been rated as critical. Affected by this issue is some unknown processing. The manipulation with an unknown input leads to a unrestricted upload vulnerability. Using CWE to declare the problem leads to CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, potentially leading to Remote Code Execution (RCE). The system fails to validate file extensions, MIME types, or file content during uploads. As a result, malicious scripts such as Node.js-based web shells can be uploaded and stored persistently on the server. These shells expose HTTP endpoints capable of executing arbitrary commands if triggered. The uploaded shell does not automatically execute, but its presence allows future exploitation via administrator error or chained vulnerabilities. This presents a high-severity threat to system integrity and confidentiality. As of time of publication, no known patched versions are available.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2025-61687 since 09/29/2025. The exploitation is known to be easy. The attack may be launched remotely. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 10/16/2025). The MITRE ATT&CK project declares the attack technique as T1608.002.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at CERT Bund (WID-SEC-2025-2218). Once again VulDB remains the best source for vulnerability data.

Affected

• Open Source Flowise

Productinfo

Vendor

• FlowiseAI

Name

• Flowise

Version

• 3.0.7

Website

• Product: https://github.com/FlowiseAI/Flowise/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion