Published threat advisories for July 12, 2026

Flowise's authentication middleware is vulnerable due to weak, hardcoded default JWT secrets and values. If an application falls back to these defaults, an attacker could forge valid JWTs to impersonate any user, including administrators, leading to authentication bypass. This is a concern because it could allow unauth

NVD modified: NVD date unavailable