CVE-2025-59528

CVE Enrichment

CVSS: 10.0 CRITICAL
EPSS: 86.22%
EPSS Percentile: 99.73%
CISA KEV: Not listed

Description

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: security-advisories@github.com
Published: 23-Sep-2025 03:15
Last Modified: 19-Oct-2026 04:10
EPSS Date: 2026-10-19
CWE: CWE-94

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

flowiseai / flowise
Version / affected range: 3.0.5
cpe:2.3:a:flowiseai:flowise:3.0.5:*:*:*:*:*:*:*

References

Last enrichment sync: 20-Oct-2026 03:19
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

targeting several known vulnerabilities, including the CustomMCP remote code execution vulnerability (CVE-2025-59528), the CSV Agent remote code execution vulnerability (CVE-2026-41264), and authentication bypass and Flowise Honeypot Captures AI-Agent Abuse Targeting Online Gambling Infrastructure

CVE (2)

People (1)

MITRE ATT&CK (1)

Products (4)

Tools (1)

Industries (1)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.