CVE-2025-57164

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field...

CVE-2025-57164

Flowise, an open-source tool for building LLM applications, is vulnerable to Remote Code Execution (RCE) in versions through v3.0.4 . The root cause is the unsanitized evaluation of user input within the "Supabase RPC Filter" field, where input is not properly cleaned or escaped. This flaw allows...