[GHSA-99pg-hqvx-r4gf] Flowise has an Arbitrary File Read

[Amayyas]

Updates

• CWEs

Comments
This advisory currently has no CWE assigned.

The advisory's own technical details show that the /api/v1/get-upload-file
and /api/v1/openai-assistants-file/download endpoints build a filesystem
path via path.join(getStoragePath(), orgId, chatflowId, chatId, sanitizedFilename). While chatflowId is validated as a UUID and explicitly
checked for path traversal sequences, and fileName is passed through
sanitize(), the chatId parameter receives no such validation before being
used as a path segment. This allows an unauthenticated user to manipulate
chatId to read arbitrary files outside the intended storage directory
(including the local SQLite database by default).

This matches CWE-22: Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal') — an unvalidated, attacker-controlled input is
used directly to construct a filesystem path.

Reference: GHSA-99pg-hqvx-r4gf

[github]

Hi there @HenryHengZJ! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[advisory-database]

Hi @Amayyas! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!