Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:06:04 +0000 CVE-2025-71327 — Flowise - Authentication Bypass via Unprotected Registration Endpoint https://cve.radiocsirt.org/vuln/cve-2025-71327 <p><strong>Affected:</strong> Flowise</p> <p>Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials.</p> <p><strong>Affected:</strong> Flowise</p> <p>Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials.</p> https://cve.radiocsirt.org/vuln/cve-2025-71327