CyberRota Analysis
AI-GeneratedFlowise versions prior to 3.1.3 are vulnerable to a critical remote code execution flaw in the Custom MCP node, which can be exploited by authenticated users to execute arbitrary commands through manipulation of environment variables and command arguments. This vulnerability allows attackers to leverage specific environment variables, such as PYTHONWARNINGS and BROWSER, to bypass security validations and execute system commands. Organizations using affected versions should prioritize immediate updates to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and BROWSER environment variables with python3, or leverage the root working directory with node to bypass validation and execute system commands.