S4E just found a high top 10 tcp port service scan
high·Product Based Web Vulnerabilities·Updated Aug 8, 2026

CVE-2025-71324 Scanner

CVE-2025-71324 Scanner - Path Traversal vulnerability in Flowise

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
0
Times Used
by S4E users
0
Assets Scanned
domains & IPs
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2025-71324
8.7
CVSShigh
Exploitable remotely over the internet · no authentication required.

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Flowiseby Flowise
AFFECTED< 3.0.6SAFE ✓≥ 3.0.6
Updated Aug 19, 2026View on NVD →
Detail

Flowise is a versatile software solution used by organizations to manage various workflow processes efficiently. It helps improve productivity by automating routine tasks and facilitating the integration of complex systems. Flowise is typically utilized by mid to large-sized enterprises to streamline operations and ensure consistent performance. The platform is adaptable, supporting a wide array of business requirements across different industries. Users benefit from its ability to enhance communication and coordination within and between teams. Providing tools for analysis and reporting, Flowise aids in decision-making and improving business intelligence.

The vulnerability identified in Flowise relates to a path traversal issue, which can be exploited by unauthorized attackers. Path Traversal vulnerabilities allow attackers to access files and directories that are stored outside the web root folder. They can manipulate variables referencing files with dot-dot-slash (../)' sequences to access arbitrary files and directories. Such exploits could potentially expose sensitive data and compromise system confidentiality. Path Traversal vulnerabilities are critical as they can lead to significant information disclosure and unauthorized actions.

The technical aspect of the vulnerability lies in the improper validation of the 'chatId' parameter in specific endpoints. The susceptibility is located in the '/api/v1/get-upload-file' and '/api/v1/openai-assistants-file/download' endpoints. These endpoints are vulnerable due to inadequate input validation, allowing unauthenticated attackers to read arbitrary files. The vulnerable parameter, 'chatId', does not adequately sanitize user input which leads to the exposure of sensitive database files. Proper validation checks on input could prevent such exploitations.

When exploited, this vulnerability could allow attackers to read sensitive files, potentially compromising system security. Attackers could gain access to confidential database contents, leading to data breaches. The exposure of such information could result in unauthorized access to systems, affecting both the confidentiality and integrity of the data. Additionally, it could lead to further attacks such as privilege escalation or execution of unauthorized commands. The impact extends to potential reputational damage and financial loss for the affected organization.

REFERENCES

Solution Advice
  • Update Flowise to version 3.0.6 or later to address the path traversal vulnerability.
  • Implement input validation mechanisms to ensure parameters such as 'chatId' do not contain malicious path sequences.
  • Regularly audit and monitor system logs for any unauthorized file access attempts.
  • Enhance access controls to limit exposure to sensitive files and directories.
  • Conduct a comprehensive security review to identify and mitigate similar vulnerabilities.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

CVE-2025-71324 Scanner - Path Traversal vulnerability in Flowise S4E