CVE-2026-69258
Summary
The POST /api/v1/prediction/:id endpoint — which is unauthenticated (whitelisted in WHITELIST_URLS) — accepts an overrideConfig object in the request body. This object is unconditionally spread into the internal flowConfig and flowData objects at two locations in the codebase without checking apiOverrideStatus. This allows an unauthenticated attacker to inject arbitrary properties into the flow execution context of any public chatflow, enabling session hijacking, cross-session data pollution, chat history manipulation, and injection of attacker-controlled values into $flow.* template variables consumed by flow nodes.
This is distinct from the previously reported overrideConfig vulnerability (GHSA-5cph-wvm9-45gj), which addressed overrideConfig's ability to modify node input parameters via replaceInputsWithConfig(). That function is properly gated behind apiOverrideStatus. The vulnerability reported here is in two separate, ungated spread operations that were not addressed by the GHSA-5cph fix.
Root Cause
In packages/server/src/utils/buildChatflow.ts at lines 557–564, the incomingInput.overrideConfig object is spread directly into flowConfig with no gating:
// File: packages/server/src/utils/buildChatflow.ts, lines 557-564
const flowConfig: IFlowConfig = {
chatflowid,
chatflowId: chatflow.id,
chatId,
sessionId,
chatHistory,
apiMessageId,
...incomingInput.overrideConfig // <-- UNGATED: always applied, no apiOverrideStatus check
}
A second ungated spread exists in packages/server/src/utils/index.ts at lines 569–574:
// File: packages/server/src/utils/index.ts, lines 569-574
const flowData: ICommonObject = {
chatflowid,
chatId,
sessionId,
chatHistory,
...overrideConfig // <-- UNGATED: always applied, no apiOverrideStatus check
}
Internal inconsistency: The node parameter override mechanism at buildChatflow.ts:180 and index.ts:589 IS correctly gated:
// File: packages/server/src/utils/buildChatflow.ts, line 180
if (incomingInput.overrideConfig && apiOver
⚡ Watch CVE-2026-69258
Get an email if CVE-2026-69258 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Advisory coverage (2)
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-69258)