[GHSA-99pg-hqvx-r4gf] Flowise has an Arbitrary File Read

[Amayyas]

Updates

• CWEs

Comments
This advisory currently has no CWE assigned.

The advisory's own technical details show that the /api/v1/get-upload-file
and /api/v1/openai-assistants-file/download endpoints build a filesystem
path via path.join(getStoragePath(), orgId, chatflowId, chatId, sanitizedFilename). While chatflowId is validated as a UUID and explicitly
checked for path traversal sequences, and fileName is passed through
sanitize(), the chatId parameter receives no such validation before being
used as a path segment. This allows an unauthenticated user to manipulate
chatId to read arbitrary files outside the intended storage directory
(including the local SQLite database by default).

This matches CWE-22: Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal') — an unvalidated, attacker-controlled input is
used directly to construct a filesystem path.

Reference: GHSA-99pg-hqvx-r4gf

[github]

Hi there @HenryHengZJ! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory