
Tech
The Spread Operator Is an Allowlist With Nothing In It: CVE-2026-69258 in Flowise
CVE-2026-69258: two ungated spread operators let an unauthenticated caller write into the flow execution context of any public Flowise chatflow.
Read the full discussion on HackerNoon
This article was aggregated from HackerNoon. Click to join the conversation.
View on HackerNoon