CVE-2026-8028 | FlowiseAI Flowise up to 3.0.12 Endpoint account.service.ts verify information disclosure

A vulnerability was found in FlowiseAI Flowise up to 3.0.12. It has been classified as problematic. This affects the function verify of the file packages/server/src/enterprise/services/account.service.ts of the component Endpoint. Performing a manipulation results in information disclosure.

This vulnerability is known as CVE-2026-8028. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Upgrading the affected component is recommended.