Missing Route-Level RBAC on Chat Message Endpoints

Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API keys to read and delete chat history. Attackers with valid but low-privileged API keys can access GET and DELETE chat message routes without required flow permissions to read chat histories, prompts, model responses, and delete messages.

Casky was already ahead

This CVE exploits attack patterns that Casky's 283matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

Flowise, a popular AI workflow platform, contains a critical authorization bypass vulnerability in versions through 3.1.4 where chat message endpoints lack proper role-based access control (RBAC) checks. This flaw allows attackers possessing low-privileged API keys to read and delete chat histories they should not have access to, including sensitive prompts, model responses, and conversation data. Organizations using Flowise to manage AI workflows with multiple users or API consumers are at risk, particularly those handling sensitive customer interactions, proprietary prompts, or confidential business logic embedded in chat flows.

Casky's 283 matched skills leverage Claude's extended reasoning to detect the attack patterns mapped to MITRE techniques TA0004 (Privilege Escalation) and TA0006 (Credential Access). Practitioners using Casky would observe findings related to unauthorized API endpoint access without proper permission validation, anomalous GET and DELETE requests to chat endpoints from low-privileged keys, and potential extraction of sensitive prompt engineering data or conversation histories. The platform's skill mappings would correlate suspicious API usage patterns with inadequate access control enforcement, helping security teams identify when threat actors exploit missing RBAC checks to exfiltrate sensitive AI-generated content or manipulate chat workflows through unauthorized deletion operations.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

283 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-100605.

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

Access with Stolen Session Cookie

identity access management · low

Run

MITRE ATT&CK Techniques

TA0004 TA0006

Investigate the attack patterns behind CVE-2026-100605

Casky has 283 skills that investigate the attack patterns behind CVE-2026-100605. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn