CVE-2026-46443: Flowise: Credential Data Leak

Synopsis

An authentication-required credential data leak affects Flowise, an open-source drag-and-drop interface for building large language model workflows. An attacker with a low-privilege account can send a filtered credential lookup request that causes the API to return the raw encryptedData field, which is correctly stripped only in the unfiltered code path. Successful exploitation gives the attacker access to encrypted credential material for any credential matching the filter, which can be used to recover secrets stored in Flowise. HarborGuard tracks this advisory and will make a patched-image rebuild available the moment an upstream fix version is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The Flowise API must be reachable over the network; an attacker sends the crafted credential-filter request from a remote host.

• AuthenticationRequired

  A low-privilege account is sufficient; the attacker must hold valid Flowise credentials to issue the filtered credential lookup request.

• Victim interactionNot required

  No victim action is needed; the attacker interacts directly with the API endpoint without requiring any other user to take action.

• Attack complexityDetail

  Exploitation involves environmental factors that raise complexity; the attacker must identify and craft the correct credentialName filter parameter value, and success is not guaranteed on every attempt.

Blast Radius

• The attacker reads the encryptedData field for any credential matching the supplied filter, recovering encrypted secrets such as API keys, service account tokens, or third-party integration passwords stored in Flowise.
• Compromised credentials can be used to authenticate to downstream services connected to Flowise flows, extending the attacker's reach beyond the Flowise instance itself.
• No integrity or availability impact is introduced directly; data in Flowise is not modified or destroyed by this exploit path.