Intrusion PreventionFlowiseAI.Flowise.Forgot.Password.tempToken.Security.Bypass
Description
This indicates an attack attempt to exploit an Security Bypass Vulnerability in FlowiseAI Flowise.
The vulnerability is due to insufficient access control in forgot-password endpoint. An unauthenticated remote attacker may be able to exploit this vulnerability by sending crafted requests to the endpoint. Successful exploitation could allow an attacker to bypass authentication on the system.
Affected Products
FlowiseAI Flowise prior to 3.0.5
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://github.com/FlowiseAI
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 59578 |
| Created | Dec 03, 2025 |
| Updated | Dec 17, 2025 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 11.55% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, MacOS |
| Affected App | Other |
| Profile Type | Permission/Privilege/Access Control |