Threats tagged 'ghsa-hh9f-v2g6-c33c'

Flowise has an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint. This flaw allows unauthenticated attackers to create arbitrary user accounts and authenticate without credentials, gaining full API access. The vulnerability is classified as critical due to the potential for unauthorized system access. No patch or remediation information is currently provided. There are no known exploits in the wild at this time.