critical9.8
CVE-2026-52098
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
Impact
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flowiseai | Flowise | Version 3.1.2 |