Tag
Flowise MCP Security Bypass Leads to Remote Code Execution
3 rules 1 TTPFlowise versions 3.1.1 and earlier are vulnerable to remote code execution (RCE) due to multiple MCP security bypasses, allowing attackers to execute arbitrary commands on the Flowise server by exploiting blocklist weaknesses in docker build, npx, and node command handling.
Flowise < 3.0.5 Missing Authentication Vulnerability Exploitable
2 rules 1 TTPA missing authentication vulnerability in Flowise versions prior to 3.0.5 allows attackers to perform critical functions without authentication, and a working exploit is publicly available on Exploit-DB.
Flowise Authenticated Remote Code Execution via MCP Adapter
3 rules 1 TTPFlowise versions 3.0.13 and earlier are vulnerable to authenticated arbitrary command execution due to unsafe serialization of stdio commands in the MCP adapter, allowing a malicious user to execute commands on the underlying operating system.
Flowise SSRF Protection Bypass via Unprotected Built-in HTTP Modules
2 rules 1 TTPFlowise is vulnerable to SSRF protection bypass via unprotected built-in HTTP modules in the custom function sandbox, allowing authenticated users to access internal network resources by exploiting the lack of SSRF protection on Node.js `http`, `https`, and `net` modules.