CVE-2026-70476 FlowiseAI CVE debrief

Who should care

Administrators and users of Flowise, particularly those with access to organization billing endpoints, should assess their exposure and verify that their instance is updated to version 3.1.3 or later.

Why it matters

CVE-2026-70476 allows authenticated attackers to perform unauthorized Stripe subscription operations on other tenants in Flowise, potentially resulting in financial impact and service disruption. Defenders should verify their instance is updated to version 3.1.3 or later and monitor for suspicious activity.

• Financial impact due to unauthorized subscription plan changes
• Service disruption due to modified seat quantities
• Verification priority for authenticated users with access to organization billing endpoints
• Potential for lateral movement or privilege escalation

Technical summary

Flowise, a drag & drop user interface to build a customized large language model flow, has a vulnerability in several organization billing endpoints. Prior to version 3.1.3, these endpoints accept attacker-controlled Stripe subscriptionId values without verifying that the identifier belongs to the authenticated user's organization. This allows an authenticated attacker to perform unauthorized Stripe subscription operations on other tenants.

Defensive priority

High

Recommended defensive actions

• Review and update Flowise to version 3.1.3 or later
• Verify Stripe subscriptionId values are properly validated
• Monitor for unauthorized subscription operations
• Confirm whether affected Flowise deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in Flowise, a drag & drop user interface to build a customized large language model flow. An authenticated attacker can perform unauthorized Stripe subscription operations on other tenants, including changing subscription plans or modifying seat quantities.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.