# CVE-2025-71324: Flowise - LFI

> Live exploitation tracking for CVE-2025-71324 by the CrowdSec Live Exploit Tracker, built from real-world attack data crowdsourced from CrowdSec's global network.

Page: https://tracker.crowdsec.net/cves/CVE-2025-71324

## Key facts

- **Exploitation phase:** Limited Exploitation. The vulnerability is known but shows very limited attacker interest or exploitation activity.
- **CVSS score:** 8.7
- **Public exploit available:** Yes
- **Affected products:** Flowise
- **Weaknesses:** CWE-73 (External Control of File Name or Path)
- **Tags:** ai_mcp, web_application, nodejs

## Description

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile(), where a fallback file-lookup path constructed without the orgId is evaluated after the storage-directory containment check, allowing path traversal beyond the intended storage directory. Unauthenticated attackers can read sensitive files such as /root/.flowise/database.sqlite, exposing all database content in the default configuration.

## CrowdSec analysis

[CVE-2025-71324](https://euvd.enisa.europa.eu/vulnerability/CVE-2025-71324) is a high-severity arbitrary file read vulnerability in Flowise versions before 3.0.6. Unauthenticated remote attackers can exploit path traversal through file-download endpoints to access sensitive files outside the intended storage directory, including the default database containing Flowise configuration and application data.

CrowdSec has been tracking this vulnerability and its exploits since 25th of August 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2025-71324 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit Flowise file-download endpoints, particularly `/api/v1/get-upload-file` and `/api/v1/openai-assistants-file/download`, by supplying traversal sequences such as `/../../` in the `chatId` parameter. Successful exploitation can return arbitrary local files, including `database.sqlite` identified by the `SQLite format 3` signature.

## Timeline

- 2026-06-25: CVE Published. CVE-2025-71324 is published to NVD.
- 2026-08-25: Rule Released. CrowdSec releases a rule to detect CVE-2025-71324 exploitation attempts against the CrowdSec Network.

## References

- https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf
- https://www.vulncheck.com/advisories/flowise-arbitrary-file-read-via-chatid-parameter
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71324.yaml

## Live exploitation data

The [Live Exploit Tracker page](https://tracker.crowdsec.net/cves/CVE-2025-71324) follows observed exploitation activity for CVE-2025-71324. [Request an API key](https://tracker.crowdsec.net/request-api-key) for full access to its exploitation timeline, attacking IP addresses and blocklists.