https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 13:04:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-255373 EUVD-2026-255373 https://cve.radiocsirt.org/vuln/euvd-2026-255373 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57164 <p>Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the &#34;Supabase RPC Filter&#34; field.</p> <p>Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the &#34;Supabase RPC Filter&#34; field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-57164 https://cve.radiocsirt.org/vuln/ghsa-7944-7c6r-55vv <p><strong>Affected:</strong> npm: flowise</p> <p>## Summary</p> <p>An authenticated admin user of **FlowiseAI** can exploit the **Supabase RPC Filter** component to execute **arbitrary server-side code** without restriction. By injecting a malicious payload into the filter expression field, the attacker can directly trigger JavaScript&#39;s `execSync()` to launch reverse shells, access environment secrets, or perform any OS-level command execution.</p> <p>This results in **full server compromise** and severe breach of trust boundaries between frontend input and backend execution logic.</p> <p>## Details</p> <p>FlowiseAI includes a component called `Supabase.ts`, located at: `packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237`</p> <p>&lt;img width=&#34;622&#34; height=&#34;177&#34; alt=&#34;image(3)&#34; src=&#34;https://github.com/user-attachments/assets/f30ccd12-4709-44ac-a6ef-8f57a1cb5c3b&#34; /&gt;</p> <p>This creates a function from user-provided string `supabaseRPCFilter` with no filtering, escaping, or sandboxing in place. Any injected JavaScript in this string is compiled and executed **immediately** when the node is triggered.</p> <p>### Exploit</p> <p>We configured our environment to use Supabase entities as follows:</p> <p>&lt;img width=&#34;573&#34; height=&#34;765&#34; alt=&#34;image(4)&#34; src=&#34;https://github.com/user-attachments/assets/b8c721db-7b6b-4fb4-99c1-a4b0c3f98caf&#34; /&gt;</p> <p>To confirm the vulnerability, a filter expression was crafted to forcibly raise an error and expose sensitive environment variables:</p> <p>&lt;img width=&#34;1920&#34; height=&#34;915&#34; alt=&#34;image(5)&#34; src=&#34;https://github.com/user-attachments/assets/19e377dd-fd78-…</p> <p><strong>Affected:</strong> npm: flowise</p> <p>## Summary</p> <p>An authenticated admin user of **FlowiseAI** can exploit the **Supabase RPC Filter** component to execute **arbitrary server-side code** without restriction. By injecting a malicious payload into the filter expression field, the attacker can directly trigger JavaScript&#39;s `execSync()` to launch reverse shells, access environment secrets, or perform any OS-level command execution.</p> <p>This results in **full server compromise** and severe breach of trust boundaries between frontend input and backend execution logic.</p> <p>## Details</p> <p>FlowiseAI includes a component called `Supabase.ts`, located at: `packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237`</p> <p>&lt;img width=&#34;622&#34; height=&#34;177&#34; alt=&#34;image(3)&#34; src=&#34;https://github.com/user-attachments/assets/f30ccd12-4709-44ac-a6ef-8f57a1cb5c3b&#34; /&gt;</p> <p>This creates a function from user-provided string `supabaseRPCFilter` with no filtering, escaping, or sandboxing in place. Any injected JavaScript in this string is compiled and executed **immediately** when the node is triggered.</p> <p>### Exploit</p> <p>We configured our environment to use Supabase entities as follows:</p> <p>&lt;img width=&#34;573&#34; height=&#34;765&#34; alt=&#34;image(4)&#34; src=&#34;https://github.com/user-attachments/assets/b8c721db-7b6b-4fb4-99c1-a4b0c3f98caf&#34; /&gt;</p> <p>To confirm the vulnerability, a filter expression was crafted to forcibly raise an error and expose sensitive environment variables:</p> <p>&lt;img width=&#34;1920&#34; height=&#34;915&#34; alt=&#34;image(5)&#34; src=&#34;https://github.com/user-attachments/assets/19e377dd-fd78-…</p> https://cve.radiocsirt.org/vuln/ghsa-7944-7c6r-55vv https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2337 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Flowise ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Flowise ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2337