CVE-2025-8943: Flowise OS command remote code execution

# CVE-2025-8943: Flowise OS command remote code execution

https://gcdradar.vercel.app/incidents/cve-2025-8943-flowise-os-command-remote-code-execution · AIR-2025-0324 · closed 2025-08-14

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-08-14
- AI role: Attack on AI
- Products: Flowise
- CVE ids: CVE-2025-8943
- CVSS: 9.8

## Summary

An unauthenticated remote code execution vulnerability exists in Flowise due to missing authentication and lack of sandboxing in the Custom MCPs feature. The issue affects versions up to 3.0.5.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-08-14: CVE-2025-8943: The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. (https://nvd.nist.gov/vuln/detail/CVE-2025-8943)
- 2025-08-14: CVE-2025-8943: Flowise OS command remote code execution (https://github.com/advisories/GHSA-2vv2-3x8x-4gv7)

## Sources

- 2025-08-14 GitHub Advisory Database: CVE-2025-8943: Flowise OS command remote code execution https://github.com/advisories/GHSA-2vv2-3x8x-4gv7
- 2025-08-14 NVD: CVE-2025-8943: The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. https://nvd.nist.gov/vuln/detail/CVE-2025-8943

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.