CVE-2026-91934

Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when it connects to SQLite databases, allowing an authenticated attacker to perform path traversal (CWE-22) and write arbitrary files on the host. By supplying a crafted SQLite database path, an attacker can write a malicious database into system directories or inject files into the web root, enabling operating-system command execution or stored XSS against other Flowise users. The flaw requires valid credentials (PR:L) but is network-exploitable with low complexity and yields high impacts on confidentiality, integrity, and availability (CVSS 4.0: 8.7). All self-hosted or cloud deployments of Flowise prior to 3.1.4 that expose the SQL Database Chain node to untrusted or semi-trusted users are affected. There is no known public PoC and no evidence of in-the-wild exploitation, and the CVE is not in the CISA KEV catalog.

What to do: Upgrade to Flowise 3.1.4 or later, which validates file paths in the SQL Database Chain node. Until patched, restrict Flowise logins to trusted users, place instances behind a VPN or IP allowlist rather than exposing them to the internet, and audit SQL Database Chain node configurations for suspicious or out-of-tree SQLite file paths. Inspect the Flowise web root and system directories for unexpected .db/.sqlite files that could indicate attempted web-shell placement or stored-XSS injection.