CVE-2026-8026: FlowiseAI Flowise API Response account.service.ts login information disclosure
A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packages/server/src/enterprise/services/account.service.ts of the component API Response Handler. The manipulation results in information disclosure. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is told to be difficult. You should upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8026?
CVE-2026-8026 is classified as a high-severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2026-8026?
To fix CVE-2026-8026, upgrade FlowiseAI Flowise to version 3.0.13 or later.
What version of FlowiseAI is affected by CVE-2026-8026?
CVE-2026-8026 affects FlowiseAI Flowise versions up to and including 3.0.12.
What type of information is disclosed in CVE-2026-8026?
CVE-2026-8026 leads to the disclosure of login information, impacting account security.
Where is the vulnerability located in FlowiseAI for CVE-2026-8026?
The vulnerability CVE-2026-8026 is located in the Login function of the account.service.ts file.