A critical insecure direct object reference in Flowise's OpenAI Assistants integration reportedly allows any authenticated low-privilege user to read credentials belonging to other workspaces; in a product the vendor has already sunset.
What Is It
CVE-2026-67622 is an insecure direct object reference (CWE-639) affecting Flowise through version 3.1.4. According to the Caycon advisory, the credential lookup logic behind the OpenAI Assistants endpoints does not verify workspace ownership, so an authenticated attacker can supply an arbitrary credential UUID and have the application resolve and use a credential belonging to a different workspace.
The advisory further describes an attack chain in which, from that point, the attacker can enumerate cross-workspace assistant metadata, retrieve file and vector store listings, and upload files into victim workspaces. These chain steps are drawn from the advisory's own description and have not been independently confirmed in the supplied data.
Why It Matters
The CVSS v3.1 base score is 9.9 (CRITICAL), vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L. The combination that drives that number is worth reading plainly: network attack vector, low attack complexity, no user interaction, and only low privileges required; meaning any legitimate account on the instance is enough. Scope is CHANGED, reflecting that the impact crosses the security boundary between tenants.
A secondary CVSS v4.0 assessment, supplied in the same NVD record, scores it 8.5 (HIGH), with high confidentiality impact on the vulnerable system and high confidentiality and integrity impact on subsequent systems.
If the reported write primitive holds, it matters as much as the read: file upload into a victim workspace would mean this is not purely an information disclosure.
What's Vulnerable
- Vendor/Product: FlowiseAI Flowise
- Affected versions: all versions up to and including 3.1.4 (
<= 3.1.4, semver), default status affected - Repository: https://github.com/FlowiseAI/Flowise
- Component: OpenAI Assistants integration / credential lookup
No CPE entries were published with this record.
Patch Status
The record is tagged unsupported-when-assigned, and the primary vendor reference is a sunset notice. In other words, this was disclosed against a product that was no longer supported at assignment time; there is no fixed version identified in the supplied data. Operators running Flowise 3.1.4 or earlier should treat migration off the product as the remediation path, since no vendor patch is indicated.
The NVD entry was published 2026-08-06 and remains in Received status, so it has not yet completed NVD analysis.
The CISA Known Exploited Vulnerabilities catalog contains no entry for this CVE as of publication (see catalog link below). There is no evidence of active exploitation in the supplied data, and exploit maturity is Not Defined.
Sources
- NVD, CVE-2026-67622: https://nvd.nist.gov/vuln/detail/CVE-2026-67622
- FlowiseAI sunset notice: https://flowiseai.com/sunset
- Caycon advisory (CVE-2026-67622): https://github.com/Caycon/cve-advisories/blob/main/2026/Flowise/CVE-2026-67622.md
- CISA Known Exploited Vulnerabilities Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog