Flowise-CVE-2026-58057-exploit

Flowise CVE-2026-58057 - Windows Remote Code Execution Exploit -orange?style=for-the-badg...

Exploit for Improper Handling of Case Sensitivity in Flowiseai Flowise

Flowise CVE-2026-58057 - Windows Remote Code Execution Exploit...

📄 Flowise 3.1.3 Arbitrary Code Execution

Flowise version 3.1.3 suffers from an arbitrary code execution vulnerability. On Windows, the Custom MCP stdio environment variable validation uses case-sensitive comparison. Supplying "nodeoptions" bypasses the NODEOPTIONS denylist and allows arbitrary code execution via --require. Exploit Title...

Flowise 3.1.3 - arbitrary code execution

Exploit Title: Flowise 3.1.3 - arbitrary code execution CVE: CVE-2026-58057 Date: 2026-06-29 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog : https://banyamersecurity.com/blog/ Vendor Homepage:...

CVE-2026-58057

creationtimestamp| type| source ---|---|--- 2026-06-28 05:54:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdbwfoarl2c 2026-06-29 14:56:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqoelxxl2n 2026-06-29 21:47:19+00:00| seen|...