CVE-2026-40933

🗓️ 21 Apr 2026 21:00:35Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 119 Views🌐 WEB

Authenticated RCE in Flowise MCP adapters due to unsafe stdio serialization; fixed in 3.1.0.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2026-40933	21 Apr 202621:00	–	attackerkb
Circl	CVE-2026-40933	16 Apr 202621:18	–	circl
CNNVD	Flowise 操作系统命令注入漏洞	21 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-40933 Flowise: Authenticated RCE Via MCP Adapters	21 Apr 202621:00	–	cvelist
Github Security Blog	Flowise: Authenticated RCE Via MCP Adapters	16 Apr 202621:18	–	github
NVD	CVE-2026-40933	21 Apr 202622:16	–	nvd
OSV	GHSA-C9GW-HVQQ-F33R Flowise: Authenticated RCE Via MCP Adapters	16 Apr 202621:18	–	osv
Positive Technologies	PT-2026-33361	16 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-40933	5 Jun 202619:14	–	redhatcve
Snyk	Command Injection	16 Apr 202621:18	–	snyk

NVD

Vulners

Node

flowiseai flowiseRange<3.1.0

[
  {
    "vendor": "FlowiseAI",
    "product": "Flowise",
    "versions": [
      {
        "version": "< 3.1.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FlowiseAI",
    "product": "flowise-components",
    "versions": [
      {
        "version": "< 3.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/FlowiseAI/Flowise/security/advisories/GHSA-c9gw-hvqq-f33r
ox	www.ox.security/blog/the-mother-of-all-ai-supply-chains-critical-systemic-vulnerability-at-the-core-of-the-mcp
ox	www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem

Parameter	Position	Path	Description	CWE
command	request body	/canvas	Unsafe serialization of stdio commands in the MCP adapter via Custom MCP on /canvas allows an authenticated attacker to add a new MCP stdio server with arbitrary commands, enabling OS command execution (pre-3.1.0).	CWE-78
stdio	request body	/canvas	Unsafe serialization of stdio commands in the MCP adapter via Custom MCP on /canvas allows an authenticated attacker to add a new MCP stdio server with arbitrary commands, enabling OS command execution (pre-3.1.0).	CWE-78
customMCPName	request body	/canvas	Unsafe serialization of stdio commands in the MCP adapter via Custom MCP on /canvas allows an authenticated attacker to add a new MCP stdio server with arbitrary commands, enabling OS command execution (pre-3.1.0).	CWE-78
args	request body	/canvas	Unsafe serialization of stdio commands in the MCP adapter via Custom MCP on /canvas allows an authenticated attacker to add a new MCP stdio server with arbitrary commands, enabling OS command execution (pre-3.1.0).	CWE-78

17 Jun 2026 10:45Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.9

EPSS0.01876

SSVC

CWE-78