CyberRota Analysis
AI-GeneratedFlowise versions prior to 3.1.4 are vulnerable to a remote code execution flaw in the Custom MCP node, which allows authenticated attackers to execute arbitrary code by manipulating the mcpServerConfig parameter with malicious npx package names. This vulnerability poses a significant risk as it enables attackers to run unauthorized code on the Flowise server, potentially compromising the entire system. Organizations using Flowise should prioritize patching to version 3.1.4 or later to mitigate this high-severity threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package names in the mcpServerConfig parameter. Attackers can invoke npx with attacker-controlled npm packages to execute code on the Flowise server.