Flowise 3.0.1 on-premise deployment contains a critical authentication bypass vulnerability due to an unprotected registration endpoint (/api/v1/account/register). An unauthenticated attacker can create new user accounts without restrictions, gaining authenticated access to the Flowise API. This allows bypassing normal authentication controls after the initial organization setup is complete.