GHSA-6vh2-wg4h-4vwj: Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

Summary The POST /api/v1/prediction/:id endpoint — which is unauthenticated (whitelisted in WHITELIST_URLS) — accepts an overrideConfig object in the request body. This object is unconditionally spread into the internal flowConfig and flowData objects at two locations in the codebase without checking apiOverrideStatus. This allows an unauthenticated attacker to inject arbitrary properties into the flow execution context of any public chatflow, enabling session hijacking, cross-session data pollution, chat history manipulation, and injection of attacker-controlled values into $flow.* template variables consumed by flow nodes. This is distinct from the previously reported overrideConfig vulnerability (GHSA-5cph-wvm9-45gj), which addressed overrideConfig's ability to modify node input parameters via replaceInputsWithConfig(). That function is properly gated behind apiOverrideStatus. The vulnerability reported here is in two separate, ungated spread operations that were not addressed by the GHSA-5cph fix. Root Cause In packages/server/src/utils/buildChatflow.ts at lines 557–564, the incomingInput.overrideConfig object is spread directly into flowConfig with no gating: // File: packages/server/src/utils/buildChatflow.ts, lines 557-564 const flowConfig: IFlowConfig = { chatflowid, chatflowId: chatflow.id, chatId, sessionId, chatHistory, apiMessageId, ...incomingInput.overrideConfig // <-- UNGATED: always applied, no apiOverrideStatus check } A second ungated spread exists in packages/server/src/utils/index.ts at lines 569–574: // File: packages/server/src/utils/index.ts, lines 569-574 const flowData: ICommonObject = { chatflowid, chatId, sessionId, chatHistory, ...overrideConfig // <-- UNGATED: always applied, no apiOverrideStatus check } Internal inconsistency: The node parameter override mechanism at buildChatflow.ts:180 and index.ts:589 IS correctly gated: // File: packages/server/src/utils/buildChatflow.ts, line 180 if (incomingInput.overrideConfig && apiOver