- CVSS
- HIGH · 8.8 v3.0 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published
- 2026-03-07
- Weakness
- CWE-639, CWE-862
- Source
- nvd.nist.gov/vuln/detail/CVE-2026-30823
Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, there is an IDOR vulnerability, leading to account takeover and enterprise feature bypass via SSO configuration. This issue has been patched in version 3.0.13.
References
How GTK Cyber trains on this
AI security training at GTK Cyber covers the LLM and ML-pipeline vulnerability classes that vulnerabilities like CVE-2026-30823 fall into. Our hands-on courses are taught by Charles Givre and other practitioners who break and defend production AI systems.