https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T21:23:58.169258+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03235 bdu:2026-03235 2026-10-17T21:23:58.249973+00:00 bdu:2026-03235 https://cve.radiocsirt.org/vuln/cnvd-2025-23078 cnvd-2025-23078 2026-10-17T21:23:58.250047+00:00 cnvd-2025-23078 https://cve.radiocsirt.org/vuln/euvd-2026-253272 EUVD-2026-253272 2026-10-17T21:23:58.250079+00:00 EUVD-2026-253272 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59528 fkie_cve-2025-59528 2026-10-17T21:23:58.250091+00:00

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6.

 https://cve.radiocsirt.org/vuln/ghsa-3gcm-f6qx-ff7p GHSA-3gcm-f6qx-ff7p — Flowise has Remote Code Execution vulnerability 2026-10-17T21:23:58.250127+00:00

Affected: npm: flowise

## Description

### Cause of the Vulnerability

The `CustomMCP` node allows users to input configuration settings for connecting to an external MCP (Model Context Protocol) server. This node parses the user-provided `mcpServerConfig` string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation.

Specifically, inside the `convertToValidJSONString` function, user input is directly passed to the `Function()` constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as `child_process` and `fs`.

### Vulnerability Flow

1. **User Input Received**: Input is provided via the API endpoint `/api/v1/node-load-method/customMCP` through the `mcpServerConfig` parameter. 2. **Variable Substitution**: The `substituteVariablesInString` function replaces template variables like `$vars.xxx`, but no security filtering is applied during this step. 3. **Dangerous Code Execution**: The `convertToValidJSONString` function executes the input using `Function('return ' + inputString)()`. If the `inputString` contains malicious code, it gets executed in the global Node.js context, allowing actions such as command execution and file system access.

## Taint Flow

- **Taint 01: Route Registration** [`index.ts` (Line 5)](https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/r…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2105 WID-SEC-W-2025-2105 — Flowise: Mehrere Schwachstellen 2026-10-17T21:23:58.250185+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um Informationen offenzulegen und beliebigen Code auszuführen.