← Back to Vulnerability Reports CVE Intelligence

CVE-2025-59528

Flowiseai Flowise•CRITICAL · CVSS 10•No exploitation reported

What is CVE-2025-59528?

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6.

CVSS10 NVD 3.1
SeverityCRITICAL
ExploitationNo exploitation reported
EPSS86% · P100
Triage statusNo Known Exploit
ActionPatch within 48 hours
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWECWE-94
NVD published2025-09-22
NVD last modified2026-10-18

Timeline

  • 2025-09-22Published to the U.S. National Vulnerability Database (NVD)
  • 2026-04-08First covered in a defend.network daily briefing
  • 2026-10-18NVD record last updated

Affected product

Flowiseai Flowise

References

Referenced in our briefings & reports

Related vulnerabilities

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.