PatchTheCVECVE-2025-71324: Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-
CVE-2025-71324 is a high-severity flaw (CVSS 7.5) affecting flowise. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticate
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.6% (top 25%) |
| CISA exploited list | No |
| Weakness | CWE-73 |
| Published | 2026-06-25 |
| Last modified | 2026-10-12 |
Last updated 2026-10-12 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Exact fixes by distribution
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Write-up: github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf
- Nuclei scan template: Flowise - Path Traversal
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-71324?
flowise: upgrade to 3.0.6. Exact commands for each OS are on this page.
Is CVE-2025-71324 being exploited?
CVE-2025-71324 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-71324 affect?
CVE-2025-71324 affects flowise. Severity is high (CVSS 7.5). Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorag
How urgent is CVE-2025-71324?
Priority 55/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action
Software pages
OpenAI and LLM tools vulnerabilities
Related CVEs
- CVE-2026-41268 CRITICAL 9.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
- CVE-2026-41276 CRITICAL 9.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
- CVE-2026-40933 CRITICAL 9.9 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
- CVE-2026-41265 CRITICAL 9.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
- CVE-2026-41137 HIGH 8.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow