CVE-2024-8181

8.1 highEPSS 45%

High (8.1) in flowiseai flowise. EPSS 45% chance of exploitation in the next 30 days.

An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS: 45% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2024-08-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flowiseai:flowise

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-2q4w-x8h2-2fvh	npm	flowise	<=1.8.2	no fix published

References

https://tenable.com/security/research/tra-2024-33

Check your stack JSON