What’s Vulnerable › Vulnerabilities
CVE-2024-8182: Flowise Denial of Service
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 13.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-08-27 · updated 2026-06-17
- Weakness: CWE-400
Description
An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the “/api/v1/get-upload-file” api endpoint.
Affected products
- FlowiseAI Flowise: 1.8.2
References
Get alerted when CVE-2024-8182 or the next vulnerability affects your stack