THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-70475 (MEDIUM 6.5) — Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/executions/index.ts lacks the checkAnyPermission() middleware that protects other execution endpoints. An

[NVD] CVE-2026-70475 (MEDIUM 6.5) — Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/executions/index.ts lacks the checkAnyPermission() middleware that protects other execution endpoints. An

lownvdPublished 2026-08-04

CVE-2026-70475 CVSS: 6.5 MEDIUM Published: 2026-08-04T20:16:54.170

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/executions/index.ts lacks the checkAnyPermission() middleware that protects other execution endpoints. Any authenticated user, regardless of assigned permiss

Indicators of compromise

CVE-2026-70475cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-70475