A vulnerability labeled as problematic has been found in FlowiseAI Flowise up to 3.0.x. The affected element is an unknown function of the file /api/v1/text-to-speech/generate. Such manipulation leads to authorization bypass.
This vulnerability is uniquely identified as CVE-2026-41279. The attack can be launched remotely. No exploit exists.
The affected component should be upgraded.
