Flowise OS command remote code execution

緊急 9.8CVE-2025-8943 · GHSA-2vv2-3x8x-4gv7 · 14/08/2025 公開 · 17/06/2026 更新

要点

CVE-2025-8943 は flowise (flowiseai), flowise に影響する深刻度「緊急」 (CVSS 9.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：75.2%（全脆弱性の 99.5% より高い）。
対処：3.0.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
flowise flowiseai	`< 3.0.1`	`3.0.1`
flowise npm	`≤ 3.0.5`	修正版なし

概要

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.

NVD の説明

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.