CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2025-71327 — Flowise contains an authentication bypass vulnerability in the unprotected /api/...

·Source: NIST NVD

Updated:

Executive Summary

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials.

Analysis

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API access without credentials. CVSS Score: 9.1. Published: 2026-06-25T22:16:58.740.

Indicators of Compromise (1)

CVE (1)
CVE-2025-71327
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 25, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Loanch expands into Southeast Asia

Loanch, a Croatia-based marketplace for alternative lending-based investments, announces the addition of AhaPay to its marketplace. Loanch clients can access investment opportunities, expanding their exposure to the growing fintech sector in Southeast Asia.

Finextra
MEDIUMVulnerabilityNEW

Google leads $30m round for space fintech Nebex

Google Ventures has led a $30 million seed round for Nebex, a market infrastructure platform for the "global space economy".

Finextra
MEDIUMVulnerabilityNEW

FlexTrade integrates with EDX Markets for institutional-grade crypto trading

FlexTrade Systems, a global leader in multi-asset execution and order management systems, and EDX Markets (EDX), a leading digital asset technology firm that combines an institutional-only trading venue with a central clearinghouse, today announced the integration of EDX into FlexTrade’s crypto and digital assets trading solution, FlexDigitalAssets.

Finextra