https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:23:58.088590+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330539 EUVD-2026-330539 2026-10-06T00:23:58.092588+00:00 EUVD-2026-330539 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71327 fkie_cve-2025-71327 2026-10-06T00:23:58.092622+00:00

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials.

 https://cve.radiocsirt.org/vuln/ghsa-hh9f-v2g6-c33c GHSA-hh9f-v2g6-c33c 2026-10-06T00:23:58.092653+00:00

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2610 WID-SEC-W-2025-2610 — Flowise (on-premise): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-06T00:23:58.092681+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Flowise ausnutzen, um Sicherheitsvorkehrungen zu umgehen.