The items that name it 2
article2026-09-10
AI orchestration platform exploitable via prompt injection that runs code and exfiltrates data. It has been archived since mid-August 2026.
repo2026-09-02
Visual builder for agents and language-model workflows. License: Apache-2.0 core, separately licensed enterprise features. Hosting: self-hosted; vendor cloud available.
In every workspace you can read 15
Security
article2026-10-29It is written here as Flowise (unauthenticated RCE, SSRF, arbitrary file read, path traversal and arbitrary write probed; MCP stdio-transport RCE endpoint /stdio-rce-a).
writeup2026-10-29It is written here as Flowise (unauthenticated RCE via POST /api/v1/node-custom-function; 1.x-specific fetch-links SSRF and arbitrary file read; get-upload-file path traversal; attachments arbitrary write; customized WHITELIST_URLS with 42 entries versus standard 20).
article2026-10-04
article2026-09-30
article2026-09-10
writeup2026-08-27
paper2026-08-26
writeup2026-08-18
repo2026-07-18
advisory
advisory
paper
repo
AI
article2026-09-10
repo2026-09-02
All technologies in this workspace.