Home / Vulnerability Intelligence / CVE-2026-8026

CVE-2026-8026 - Vulnerability Analysis

LowCVSS: 3.7

Last Updated: May 7, 2026

FlowiseAI Flowise - Information Disclosure

Published: May 6, 2026Updated: May 7, 2026PoC AvailableRemote Exploitable

Overview

FlowiseAI Flowise <= 3.0.12 contains an information disclosure vulnerability caused by manipulation in the API Response Handler's Login function, letting remote attackers access sensitive information, exploit requires complex conditions.

Severity & Score

Severity: Low

CVSS Score: 3.7

Impact

Remote attackers can disclose sensitive information, potentially compromising user data confidentiality.

Mitigation

Upgrade to the latest version.

References

https://gist.github.com/YLChen-007/50a553f09aa1c7c04ce18cec13986a91
https://vuldb.com/submit/777656
https://vuldb.com/vuln/361273
https://vuldb.com/vuln/361273/cti

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-8026
Severity: Low
CVSS Score: 3.7
Type: undefined
Status: confirmed

CWE

CWE-200
CWE-312

CVSS Metrics

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N