CVE-2025-8943

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.

9.8

CVSS

66.3%

EPSS (exploit prob.)

99th

EPSS percentile

2025-08-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-306CWE-862

Affected products

Vendor	Product	Affected versions
flowiseai	flowise	< 3.0.1

Check a specific version with /api/v1/cve/match.

References

https://research.jfrog.com/vulnerabilities/flowise-os-command-remote-code-execution-jfsa-2025-001380578/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-8943