Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed
Summary: Threat actors are exploiting CVE-2025-59528, a CVSS 10.0 code injection flaw in the open-source Flowise AI platform that lets the CustomMCP node execute JavaScript without security validation, enabling remote code execution with full Node.js runtime privileges. VulnCheck traced the exploitation activity to a single Starlink IP address, and the flaw was fixed in version 3.0.6 of the npm package after being public for more than six months.
Why it matters: VulnCheck puts 12,000+ Flowise instances on the internet, and this is the third Flowise flaw exploited in the wild after CVE-2025-8943 and CVE-2025-26319 - a patch that has been available for over six months leaves that entire exposed population available for opportunistic scanning and exploitation.
Read the original at The Hacker News ↗
- Topics
- Supply Chain & AppSec
- Mentions
- CVE-2025-26319CVE-2025-59528CVE-2025-8943
- Related
- ⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More Cyber Risks ·⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors Cyber Risks ·Kitesurf is now open source Cyber Risks · Nov 13, 2026