Which products and versions are affected by CVE-2024-8181?

Affected: Flowise (Flowiseai) versions 1.8.2, >= 1.8.2. The full list is in the CVE brief.

Is CVE-2024-8181 being exploited in the wild?

It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Sep 29, 2024.

Is CVE-2024-8181 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2024-8181?

No public exploit code is known.

Is there a fix for CVE-2024-8181?

No fixed version is listed yet; check the vendor advisory for mitigations.

How urgently should CVE-2024-8181 be patched?

Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Request A Demo

On CISA KEVHigh

CVE-2024-8181Flowise Authentication Bypass

Flowise Authentication Bypass vulnerability

Published Aug 27, 2024 · Updated Oct 21, 2026 · Also known as GHSA-2q4w-x8h2-2fvh

Key Facts

Patch immediately

CVE-2024-8181 is a high-severity vulnerability (CVSS 8.6 v4) affecting Flowise (Flowiseai).
It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Sep 29, 2024. No public exploit code is known.
EPSS estimates a 45% probability of exploitation in the next 30 days.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Scores

CVSS v4

8.6

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS (30-day exploit likelihood)

45%

Higher than 98.7% of all scored CVEs

Exploit maturity

Exploited (KEV)

ATLAS score

55/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Sep 29, 2024

33 days after publication

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Exploited (KEV)

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Advisories And Exploit References

advisoryhttps://www.cve.org/CVERecord?id=CVE-2024-8181
advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2024-8181
advisoryGHSA advisory

Description

An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.

Known-Exploited Catalog Listings

Catalog	Added	Remediation due	Ransomware use
CIRCL KEV	Sep 29, 2024	n/a	Not reported
Industry KEV feed	Sep 29, 2024	n/a	Not reported

Affected Products

3 affected entries in total

Product	Affected versions	Fixed in
FlowiseFlowiseai	1.8.2, >= 1.8.2	n/a

Timeline

Publicly disclosed
Aug 27, 2024
Added to CIRCL KEV
Sep 29, 2024
Added to Industry KEV feed
Sep 29, 2024
Last updated
Oct 21, 2026

Weakness Type

CWE-285 Improper Authorization
CWE-287 Improper Authentication

References

11 more references in the full CVE brief

FAQ

Common Questions.

An Authentication Bypass vulnerability exists in Flowise version 1.8.2.
Affected: Flowise (Flowiseai) versions 1.8.2, >= 1.8.2. The full list is in the CVE brief.
It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Sep 29, 2024.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Is CVE-2024-8181 On Your Attack Surface?

Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.