CVE-2025-59528

216.73.217.22

· Published 22/09/2025 20:15 · Modified 23/09/2025 16:45

Labels: CVE-2025-59528 2025-09-22 CVE-2025-59528 CWE-94 [email protected]

Essential information

Published: 22/09/2025 20:15
Modified: 23/09/2025 16:45
Author: —
Creator: —
CVSS: 10.0 CRITICAL (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS metrics

Description

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6.

NVD status

Status: Analyzed — CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
flowiseai / flowise	`cpe:2.3:a:flowiseai:flowise:3.0.5:::::::*`