# Flowise 3.1.2

- Product: Flowise (https://whatsnew.fyi/product/flowise)
- Vendor: FlowiseAI
- Date: 2026-04-14
- Version: 3.1.2
- Original notes: https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.2
- Permalink: https://whatsnew.fyi/product/flowise/releases/3.1.2

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Remove hardcoded CORS wildcard on TTS endpoint to prevent cross-origin credential abuse
- **security** — Improve MCP Server Config security
- **fixed** — Fix session cleanup when using MySQL for storing sessions
- **security** — Fix mass assignment in Tools endpoint
- **security** — Fix credential data leak
- **security** — Fix chatflow query to protect against cross-workspace chatflow disclosure
- **fixed** — Limit Markdown rendering on RichInput in UI
- **security** — Fix mass assignment in Variables endpoints
- **security** — Fix IDOR takeover in PUT /api/v1/user
- **fixed** — Fix redis pub/sub and streaming response issue with better handling of connection issues
- **fixed** — Fix field name mismatch between AgentFlow SDK internal representation and server expectation
- **added** — Add Pipedream MCP support
- **fixed** — Correct sonar-deep-research model name in Perplexity config
- **fixed** — Correct o4-mini pricing under ChatOpenAI
- **added** — Store page sizes of views in local storage
- **security** — Fix mass assignment in Assistant Update endpoint
- **added** — Add support for Variable System and Syntax Support in AgentFlow
- **security** — Fix mass assignment in Chatflow endpoints
- **fixed** — Correct multiple model label typos in Groq, Mistral, and Bedrock configs
- **security** — Fix IDOR in Evaluators and Evaluations endpoints

##### What's Changed

* Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/5901
* Additional Improvements to MCP Server Config security by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/5943
* fix: session cleanup when using mysql for storing sessions by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/5984
* Fix Mass Assignment in Tools Endpoint by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/5954
* Fix Credential Data Leak by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/6042
* Fix Chatflow Query to Protect Against Cross-Workspace Chatflow Disclosure by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/6043
* fix(ui): limit Markdown rendering on RichInput by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6061
* Fix Mass Assignment in Variables Endpoints by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/5955
* Fix IDOR Takeover in PUT /api/v1/user by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/5986
* fix: redis pub/sub and streaming response issue by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6008
* Revert "fix: redis pub/sub and streaming response issue" by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6084
* chore: bump @flowiseai/agentflow to 0.0.0-dev.7 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6087
* Update README.md for @flowiseai/agentflow by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6088
* Fix/agentflow fix field name mismatch between SDK internal representation and server expectation by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6092
* chore: bump @flowiseai/agentflow to 0.0.0-dev.8 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6096
* feat: add Pipedream MCP support by @rohan-patil2 in https://github.com/FlowiseAI/Flowise/pull/5858
* fix(models): correct sonar-deep-research model name in Perplexity config by @AbdulSamad94 in https://github.com/FlowiseAI/Flowise/pull/6069
* fix(models): correct o4-mini pricing under chatOpenAI by @AbdulSamad94 in https://github.com/FlowiseAI/Flowise/pull/6079
* mini-feat: Store page sizes of views in local storage by @Mewyii in https://github.com/FlowiseAI/Flowise/pull/5830
* Mass Assignment in Assistant Update Endpoint by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/5945
* Feat/agentflow add support for Variable System & Syntax Support by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6067
* chore: bump @flowiseai/agentflow to 0.0.0-dev.9 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6106
* Fix Mass Assignment in Chatflow Endpoints by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/5953
* fix(models): correct multiple model label typos (Groq, Mistral, Bedrock) by @AbdulSamad94 in https://github.com/FlowiseAI/Flowise/pull/6104
* Fix IDOR in Evaluators and Evaluations Endpoints by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/6050
* feat: email change confirmation flow by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/5992
* fix(gmail): include draft id in update_draft tool schema by @tsubasakong in https://github.com/FlowiseAI/Flowise/pull/5925
* fix: skip empty metadata filter in RetrieverTool to prevent vector store error by @majiayu000 in https://github.com/FlowiseAI/Flowise/pull/5976
* Add Permission Checks to Vector Store API's by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/6045
* fix: preserve sourceDocuments and metadata in ExecuteFlow node by @majiayu000 in https://github.com/FlowiseAI/Flowise/pull/5972
* fix: lint issues by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6115
* feat(ChatOllama): add 'think' input op

_[Truncated at 4000 characters — full notes: https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.2]_