CVE-2026-100608 describes a missing authorization vulnerability in FlowiseAI Flowise through version 3.1.4. When the server operates in queue mode with the BullMQ dashboard enabled and not in cloud mode, the /admin/queues endpoint is protected only by a JWT verification middleware that does not enforce role, permission, or tenant scoping. This allows any authenticated user, regardless of privilege level, to access the Bull-Board UI and view or manipulate all queues and job payloads across the entire instance. Sensitive information exposed includes chat inputs, override configurations, credential identifiers, chatflow graph definitions, and organizational context. Write actions such as retry, remove, promote, and clean are also available across tenants. The dashboard endpoint lies outside the global API gate, further bypassing broader access controls. No official fix or patch is currently available.

The vulnerability allows any authenticated user, including low-privileged tenant members, to access and manipulate all BullMQ queues and job data across tenants. This exposure includes sensitive information such as credentials, chat inputs, system prompts, and organizational identifiers. Unauthorized write actions on queues can disrupt or manipulate job processing across tenants, potentially leading to data leakage, privilege escalation, or denial of service within the affected Flowise instance.

No official patch or fix is currently available for this vulnerability. Users should consider disabling the BullMQ dashboard or restricting access to the server to trusted users only until a fix is released. Monitor vendor advisories for updates regarding remediation.