Critical Flowise Vulnerability Allows Attackers to Take Over a Server

A critical vulnerability disclosed in Flowise allows an attacker to take over a server when a logged-in user imports a malicious workflow file. Self-hosted deployments are vulnerable by default; the managed Flowise Cloud service is not affected.