Flowise versions before 3.0.6 have an arbitrary file read vulnerability in the chatId parameter of two API endpoints. The chatId parameter is not properly validated, allowing path traversal beyond the intended storage directory. This enables unauthenticated attackers to read sensitive files such as the default database file, exposing all database content.