CVE-2026-70473 | FlowiseAI Flowise up to 3.1.2 /api/v1/upsert-history improper authorization

A vulnerability was found in FlowiseAI Flowise up to 3.1.2. It has been classified as problematic. This affects an unknown part of the file /api/v1/upsert-history. This manipulation causes improper authorization.

This vulnerability is registered as CVE-2026-70473. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.