CVE-2025-59528: Flowise remote code execution via CustomMCP node

# CVE-2025-59528: Flowise remote code execution via CustomMCP node

https://gcdradar.vercel.app/incidents/cve-2025-59528-flowise-remote-code-execution-via-custommcp-n · AIR-2025-0337 · closed 2025-09-15

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-09-15
- AI role: Attack on AI
- Products: Flowise
- CVE ids: CVE-2025-59528
- CVSS: 10

## Summary

Unsafe evaluation of user-provided MCP server configuration strings via the Function constructor allowed remote code execution. A fix was released to address the insecurity.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-09-22: CVE-2025-59528: Flowise is a drag & drop user interface to build a customized large language model flow. (https://nvd.nist.gov/vuln/detail/CVE-2025-59528)
- 2025-09-15: CVE-2025-59528: Flowise has Remote Code Execution vulnerability (https://github.com/advisories/GHSA-3gcm-f6qx-ff7p)

## Sources

- 2025-09-15 GitHub Advisory Database: CVE-2025-59528: Flowise has Remote Code Execution vulnerability https://github.com/advisories/GHSA-3gcm-f6qx-ff7p
- 2025-09-22 NVD: CVE-2025-59528: Flowise is a drag & drop user interface to build a customized large language model flow. https://nvd.nist.gov/vuln/detail/CVE-2025-59528

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.