CVE-2026-73601

creationtimestamp| type| source ---|---|--- 2026-08-13 13:50:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxrxmo2ij2e 2026-08-15 12:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt4pk55rpd2b 2026-08-17 16:45:16+00:00| seen|...

CVE-2026-73601 Flowise before 3.1.3 Remote Code Execution via Custom MCP

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOMMCPPROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and...

CVE-2026-73601

Flowise