{"uuid": "21b38268-6617-4e8b-95f2-7ceffc2692cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6nxosl2l", "content": "CVE-2026-100606 - flowise\nWhen Flowise is set up with single sign\u2011on, an email address used for an invitation can be used to log in without the invitation token. Anyone who can sign in to the same SSO\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:05.028608Z"}