Back to Database
Status published
Critical
CVE-2024-8181
Flowise Authentication Bypass
Vulnerability Description
An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8181
Credits & Attribution
No credits recorded in the NVD database.
More from FlowiseAI
View All →CVE-2025-61913
Flowise is vulnerable to arbitrary file read, arbitrary file write
Critical
10
CVE-2025-61687
FlowiseAI/Flosise has File Upload vulnerability
High
8.3
CVE-2025-59528
Flowise has Remote Code Execution vulnerability
Critical
10
CVE-2025-59527
FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability
High
7.5
CVE-2025-59434
Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function
Critical
9.6
Affected Vendor
FlowiseAI
View all reports →Affected Software
Flowise
Vulnerable Versions:
1.8.2
Timeline
Official Publish:
August 27th, 2024
Last Modified:
September 6th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.