AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

FlowiseGHSA-2vv2-3x8x-4gv7

Flowise OS command remote code execution

Flowise

CVE-2025-8943 · Published Aug 14, 2025 · updated Aug 18, 2025

Critical9.8
No fix yet
GitHub advisory

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.

Affected versions

PackageAffectedFixed in
flowise
npm
<= 3.0.5No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-306, CWE-78
Also known as
CVE-2025-8943

More Flowise advisories

All Flowise
Critical 9.8Sep 15, 2025Flowise has arbitrary file access due to missing chat flow id validationCVE-2025-71334fixed in 3.0.6Critical 9.1Sep 15, 2025Flowise has an Arbitrary File ReadCVE-2025-71324fixed in 3.0.6Critical 10.0Sep 15, 2025Flowise has Remote Code Execution vulnerabilityCVE-2025-59528fixed in 3.0.6High 7.5Sep 15, 2025FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerabilityCVE-2025-59527fixed in 3.0.6Critical 9.1Sep 15, 2025FlowiseAI Pre-Auth Arbitrary Code ExecutionCVE-2025-57164fixed in 3.0.6Critical 9.8Sep 12, 2025Flowise: information disclosureCVE-2025-58434fixed in 3.0.6