Security Advisory

CVE-2026-12821

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-21 23:15:08

Last updated 2026-06-22 10:22:43

Assigner VulDB

CVSS score 5.3

State PUBLISHED

Description

A vulnerability was determined in FlowiseAI Flowise up to 3.1.2. The impacted element is an unknown function of the file packages/components/nodes/documentloaders/S3/S3.ts of the component S3 Document Loader. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

← Browse all CVEs View on cve.org ↗