Flowise versions prior to 3.0.8 contain a vulnerability in the ReadFileTool that allows authenticated users to read arbitrary files on the server filesystem. This occurs because the tool does not restrict file path access, enabling attackers to access sensitive files such as encryption keys and database files. The vulnerability has been confirmed in the latest Flowise Docker image and can lead to remote command execution. A fix is available in version 3.0.8.