PT-2025-33147 · Flowise · Flowise

Assaf Levkovich · Published 2025-08-14 · Updated 2026-04-07 · CVE-2025-8943

Positive Technologies · (AI Summary)

CVSS v2.0

10

Critical

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.0.1

Description The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. Flowise’s authentication and authorization model is minimal and lacks role-based access controls (RBAC). The default installation operates without authentication unless explicitly configured. This allows unauthenticated network attackers to execute unsandboxed OS commands via the Custom MCPs feature. The vulnerability allows for Remote Code Execution (RCE).

Recommendations Flowise versions prior to 3.0.1 should be updated to version 3.0.1 or later.

Exploit

Fix

RCE

Missing Authentication

OS Command Injection

Missing Authorization

Weakness Enumeration

CWE-306

CWE-78

CWE-862

Related Identifiers

BDU:2026-03234

CVE-2025-8943

GHSA-2VV2-3X8X-4GV7

Affected Products

Flowise

References · 16

• 🔥 https://research.jfrog.com/vulnerabilities/flowise-os-command-remote-code-execution-jfsa-2025-001380578 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8943 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8943 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2vv2-3x8x-4gv7 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03234 · Security Note
• https://github.com/FlowiseAI/Flowise · Note
• https://t.me/aptreports/26051 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1955946420441096483 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/1988139665120174549 · Twitter Post
• https://t.me/cveNotify/132223 · Telegram Post
• https://twitter.com/CVEnew/status/1956654817750941874 · Twitter Post
• https://twitter.com/XavSecOps/status/2024910325674393957 · Twitter Post
• https://twitter.com/XavSecOps/status/2010738191511208206 · Twitter Post
• https://twitter.com/Chocapikk_/status/1990897950071882114 · Twitter Post
• https://t.me/CSIRT_italia/2931 · Telegram Post