CVE-2026-8028 - Vulnerability Analysis

Overview

FlowiseAI Flowise <= 3.0.12 contains an information disclosure vulnerability caused by manipulation in the verify function of the Endpoint component, letting remote attackers disclose sensitive information, exploit requires high complexity.

Severity & Score

Impact

Remote attackers can disclose sensitive information, potentially compromising user data confidentiality.

Mitigation

Upgrade to the latest version.

References

• https://vuldb.com/vuln/361276/cti
• https://gist.github.com/YLChen-007/1d52497b0221835f99367be61612746b
• https://vuldb.com/submit/777659
• https://vuldb.com/vuln/361276

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner