CVE-2025-71334: Flowise arbitrary file access via unvalidated chatflowId/chatId
CVE-2025-71334 is verified against FlowiseAI/Flowise · npm affected versions: GitHub Advisory Database and OSV list flowise >=2.2.8 and <3.0.6; patched version is 3.0.6. vulnerability class: Path Traversal This critical reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00310.
pruva-verify REPRO-2026-00310 curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00310/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh Flowise before 3.0.6 contains a pre-auth arbitrary file access issue in its file storage helpers and API handlers. Attacker-controlled chatflowId/chatId values are concatenated into storage paths without sufficient validation, allowing path traversal out of the intended storage root. This enables arbitrary file write and, on some routes, arbitrary file read through unauthenticated endpoints. The issue is reproducible against a vulnerable self-managed Flowise instance using default/local storage. Fixed in 3.0.6.
The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired.
Loading session...
Scripts, logs, diffs, and output captured during the reproduction.