Flowise-RCE

Flowise-RCE CVE-2025-58434 & CVE-2025-59528...

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability LEGAL DISCLAIMER AND TERMS OF USE The Proof of Concept PoC code and technical information provided in this document are intended solely for educational purposes, academic research, and authorized security testing...

CVE-2026-59528

creationtimestamp| type| source ---|---|--- 2026-07-27 18:02:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrni5sssge26 2026-08-12 10:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msuvk6bu7g2l...

CVE-2026-59528

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528-Flowis...

Exploit for Missing Authentication for Critical Function in Flowiseai Flowise

Silentium — HackTheBox Writeup Platform: HackTheBox...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 PoC ⚠️ For educational and authorized securit...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 — Flowise AI Authenticated Remote Code Executio...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528-PoC A simple python script to exploit CVE-2025-...

EUVD-2025-59528

Malicious code in gilang-kembang46-sluey npm...

Flowise 3.0.4 - Remote Code Execution (RCE)

Exploit Title: Flowise 3.0.4 - Remote Code Execution RCE Date: 10/11/2025 Exploit Author: nltt0 https://github.com/nltt-br Vendor Homepage: https://flowiseai.com/ Software Link: https://github.com/FlowiseAI/Flowise Version: 3.0.5 CVE: CVE-2025-59528 from requests import post, session from argpars...

CVE-2025-59528

creationtimestamp| type| source ---|---|--- 2025-09-23 00:02:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzhmmncqts2w 2025-11-01 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4lvabofbd2l 2025-11-22 21:02:33+00:00| seen|...

CVE-2025-59528

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided...

flowise (>=2.0.0, <=2.2.8) potentially affected by CVE-2025-59528 via flowise-components (2.2.8)

flowise-components NPM version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on flowise-components and may be impacted: - flowise =2.0.0, =2.2.8 Source cves: CVE-2025-59528 Source advisory: SNYK:JS-FLOWISECOMPONENTS-12818376...