CVE-2025-71333 – CyberSecurityBoard

Critical CVEs

CVE-2025-71333 — Critical vulnerability brief

Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local. Attackers can…

critical Critical CVE CVE-2025-71333

June 25, 2026