CVE-2026-41279 - Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

Back Back to CVE browser

HIGH

Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

Published Apr 23, 2026

8.2

HIGH

CVSS 4.0

EPSS 0.40%

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint (POST /api/v1/text-to-speech/generate) is whitelisted (no auth) and accepts a credentialId directly in the request body. When called without a chatflowId, the endpoint uses the provided credentialId to decrypt the stored credential (e.g., OpenAI or ElevenLabs API key) and generate speech. This vulnerability is fixed in 3.1.0.

Affected products

Vendor FlowiseAI Product Flowise Default
n/a
- Version
  < 3.1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

FlowiseAI

Flowise

n/a

Version	Status	Constraints
< 3.1.0	affected	-

Ecosystem	Package	Introduced	Fixed
npm	flowise	0	3.1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25298
Advisory
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5fw2-mwhh-9947
x_refsource_CONFIRMExploitVendor Advisory
https://github.com/advisories/GHSA-5fw2-mwhh-9947
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-41279

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25298		Advisory
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5fw2-mwhh-9947		x_refsource_CONFIRMExploitVendor Advisory
https://github.com/advisories/GHSA-5fw2-mwhh-9947		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-41279