PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-67622 FlowiseAI CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. CVE-2026-67622 is an insecure direct object reference vulnerability in Flowise's OpenAI Assistants integration, allowing authenticated attackers to access credentials for other workspaces. This can lead to enumeration of cross-workspace assistant metadata, retrieval of file and vector store listings, and upload of files into victim workspaces. The CVE record was published on 2026-08-06T22:18:22.873Z and has not been modified since then. The NVD entry is currently Received. Users of Flowise with OpenAI Assistants integration, particularly those with multi-workspace setups or sensitive data, should verify their configurations and implement additional security measures to prevent unauthorized credential access. Evidence is based on official CVE and NVD records, as well as references from vulncheck.com and a GitHub advisory. Verify workspace-scoped authorization checks in credential lookup logic.

Vendor
FlowiseAI
Product
Flowise
CVSS
HIGH 8.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-06
Original CVE updated
2026-08-07
Advisory published
2026-08-06
Advisory updated
2026-08-07

Who should care

Users of Flowise with OpenAI Assistants integration, particularly those with multi-workspace setups or sensitive data, should verify their configurations and implement additional security measures to prevent unauthorized credential access.

Technical summary

CVE-2026-67622 is an insecure direct object reference vulnerability in Flowise's OpenAI Assistants integration. The vulnerability allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistants endpoints without workspace ownership verification. This can lead to enumeration of cross-workspace assistant metadata, retrieval of file and vector store listings, and upload of files into victim workspaces.

Defensive priority

Authenticated attackers can access credentials for other workspaces by supplying an arbitrary credential UUID, allowing enumeration of cross-workspace assistant metadata, retrieval of file and vector store listings, and file uploads into victim workspaces. Verify workspace-scoped authorization checks in credential lookup logic.

Recommended defensive actions

  • Verify workspace-scoped authorization checks in credential lookup logic
  • Restrict access to credential UUIDs
  • Monitor for suspicious credential access patterns
  • Implement additional authentication checks for Assistants endpoints
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE-2026-67622 record indicates an insecure direct object reference vulnerability in Flowise's OpenAI Assistants integration, allowing authenticated attackers to access credentials for other workspaces. Evidence is based on official CVE and NVD records, as well as references from vulncheck.com and a GitHub advisory.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T22:18:22.873Z and has not been modified since then.