Evaluation record · flowise

Flowise

v3.1.3

FlowiseAI (Workday since Aug 2025)

Agentvisuallow-codeopen-sourcesecurity-incidents

Strong

About This Agent

Open-source low-code platform for LLM orchestration flows and AI agents, acquired by Workday August 2025. Visual node editor for RAG pipelines, chatbots, agents. SECURITY: three CVEs with confirmed in-the-wild exploitation - CVE-2025-59528 (CVSS 10.0 RCE via CustomMCP node, fixed in 3.0.6, exploited from April 2026, 12,000+ instances exposed), CVE-2025-8943 (CVSS 9.8 OS command RCE), CVE-2025-26319 (arbitrary file upload). Upgrade to 3.1.x; do not expose unauthenticated instances.

Last Evaluated: July 9, 2026

Official Website

Trust Vector Analysis

Dimension Breakdown

🚀Performance & Reliability

node execution

Flow execution testing

Evidence

Flowise Documentation — Node-based execution with sequential and parallel flows

highVerified: 2026-07-09

llm chain support

LLM chain testing

Evidence

LangChain Integration — Built on LangChain with support for chains and agents

highVerified: 2026-07-09

chatflow management

Chatflow capability assessment

Evidence

Chatflows — Multiple chatflows with API endpoints and embeddings

highVerified: 2026-07-09

vector store support

Vector store integration testing

Evidence

Vector Stores — Multiple vector stores: Pinecone, Weaviate, Qdrant, Chroma

highVerified: 2026-07-09

error handling

Error recovery testing

Evidence

Error Management — Basic error handling with visual feedback

mediumVerified: 2026-07-09

latency

Performance monitoring

Evidence

Performance — Depends on LLM calls, vector searches, and chain complexity

mediumVerified: 2026-07-09

🛡️Security

api authentication

Authentication testing

Evidence

API Security — API key authentication for chatflows and predictions

GHSA-3gcm-f6qx-ff7p (CVE-2025-59528) — CVE-2025-59528: CVSS 10.0 code injection RCE via CustomMCP node config (fixed in 3.0.6, Sept 2025); first confirmed in-the-wild exploitation April 2026 with an estimated 12,000-15,000 internet-exposed instances

The Hacker News - Flowise exploitation — Third Flowise flaw with in-the-wild exploitation after CVE-2025-8943 (CVSS 9.8 OS command RCE) and CVE-2025-26319 (CVSS 8.9 arbitrary file upload)

mediumVerified: 2026-07-09

self hosting

Deployment security assessment

Evidence

Deployment — Self-hosting via Docker, npm, or cloud platforms

highVerified: 2026-07-09

credential management

Credential security review

Evidence

Credentials — Encrypted credential storage with environment variables

mediumVerified: 2026-07-09

open source

Open source assessment

Evidence

GitHub — Apache 2.0 license, 54k+ stars, active development (now under Workday ownership)

highVerified: 2026-07-09

data isolation

Data isolation assessment

Evidence

Architecture — Basic isolation, enterprise features limited

mediumVerified: 2026-07-09

🔒Privacy & Compliance

data retention

Privacy architecture review

Evidence

Chat History — Configurable chat history storage and retention

mediumVerified: 2026-07-09

gdpr compliance

Compliance capabilities assessment

Evidence

Self-Hosted — GDPR compliance possible with self-hosted deployment

mediumVerified: 2026-07-09

local deployment

Deployment options assessment

Evidence

Local Installation — Easy local deployment with Docker or npm

highVerified: 2026-07-09

llm data sharing

Data flow analysis

Evidence

LLM Integration — Data sent to configured LLM providers

mediumVerified: 2026-07-09

embedding storage

Data storage assessment

Evidence

Vector Stores — Control over vector store selection and data storage

mediumVerified: 2026-07-09

👁️Trust & Transparency

documentation quality

Documentation completeness review

Evidence

Flowise Docs — Comprehensive docs with examples and video tutorials

highVerified: 2026-07-09

visual interface

UI/UX assessment

Evidence

UI Features — Intuitive drag-and-drop visual interface

highVerified: 2026-07-09

open source

Open source assessment

Evidence

GitHub — Apache 2.0, 54k+ stars, very active community

highVerified: 2026-07-09

community support

Community engagement analysis

Evidence

Community — Active Discord and GitHub discussions

highVerified: 2026-07-09

chatflow export

Portability assessment

Evidence

Import/Export — Export chatflows as JSON for portability

mediumVerified: 2026-07-09

⚙️Operational Excellence

ease of use

Usability assessment

Evidence

User Experience — Very intuitive for non-technical users

highVerified: 2026-07-09

scalability

Scalability testing

Evidence

Scaling — Basic scaling support, requires container orchestration

mediumVerified: 2026-07-09

cost predictability

Pricing model analysis

Evidence

Open Source — Free Apache 2.0, costs only for hosting and LLM APIs

highVerified: 2026-07-09

monitoring

Monitoring features assessment

Evidence

Monitoring Features — Basic chat history and logs, limited monitoring

mediumVerified: 2026-07-09

api deployment

API capabilities assessment

Evidence

API Endpoints — Chatflows auto-generate API endpoints

highVerified: 2026-07-09

marketplace

Template ecosystem assessment

Evidence

Templates — Growing marketplace of pre-built chatflows

highVerified: 2026-07-09

Strengths

+Extremely user-friendly visual interface for building AI agents
+Open source (Apache 2.0) with very active community (54k+ stars)
+Backed by Workday since August 2025 acquisition
+Easy deployment with Docker, npm, or cloud platforms
+Built-in support for multiple vector stores and LLM providers
+Auto-generates API endpoints for chatflows
+Growing marketplace of pre-built templates and use cases

Limitations

!Limited enterprise features (advanced auth, monitoring, RBAC)
!Primarily designed for prototyping and small-scale deployment
!Performance optimization requires technical knowledge
!Security features less mature than enterprise platforms
!Scaling to high-volume production requires additional infrastructure
!Limited debugging capabilities for complex flows
!Serious CVE history with confirmed in-the-wild exploitation: CVE-2025-59528 (CVSS 10.0 RCE, exploited April 2026), CVE-2025-8943 (CVSS 9.8 RCE) and CVE-2025-26319 (arbitrary file upload); upgrade to 3.0.6+/3.1.x and harden exposed deployments

Metadata

license: Apache 2.0

supported models

0: OpenAI

1: Anthropic

2: Google

3: Azure OpenAI

4: HuggingFace

5: Ollama

programming languages

0: TypeScript

1: JavaScript

deployment type: Self-hosted (Docker, npm) or cloud

tool support

0: LangChain tools

1: Custom nodes

2: API integrations

pricing model: Free open source (FlowiseAI Cloud managed service available)

github stars: 54000+

first release: 2023

vector stores: Pinecone, Weaviate, Qdrant, Chroma, Supabase, Postgres

ui technology: React-based visual node editor

acquisition: Acquired by Workday in August 2025

version: 3.1.3 (June 25, 2026)

Use Case Ratings

customer support

Excellent for building support chatbots with visual interface

code generation

Can build code agents but limited specialized capabilities

research assistant

Strong for RAG-based document Q&A and summarization

data analysis

Can integrate analysis tools via LangChain nodes

content creation

Good for building content generation workflows

education

Ideal for educators building AI tutors without coding

healthcare

Prototyping suitable, production needs hardening

financial analysis

Self-hosted option but limited enterprise features

legal compliance

Good for document analysis with vector search

creative writing

Suitable for creative prompt engineering workflows