Flowise OpenAI Assistants Vector Store Missing Authentication Vulnerability

A vulnerability exists in Flowise versions prior to 3.1.2, where all CRUD endpoints for the OpenAI Assistants Vector Store lack authentication middleware. The route '/api/v1/openai-assistants-vector-store' is not included in WHITELIST_URLS and, although it requires API key authentication, it does not enforce any permission checks. This oversight allows any authenticated user to create, modify, delete vector stores, and upload or exfiltrate files, regardless of their assigned permissions.

Impact

The absence of authentication and permission checks on the OpenAI Assistants Vector Store CRUD operations allows any authenticated user to manipulate vector stores and associated files without restriction. This could lead to unauthorized data modification, deletion, or exfiltration.

Remediation

Users can update to Flowise version 3.1.2 or later, where this vulnerability has been patched.