CVE-2026-73601: Remote code execution in Flowise Custom MCP node
Flowise
Flowise contains a remote code execution vulnerability in the Custom MCP node when configured with specific protocol settings. Attackers can manipulate environment variables to execute arbitrary system commands.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- CVSS
- 9.0
- EPSS
- 0.01 · top 34% · 2026-11-13
- fix status
- Fix status unknown
- first report
- 13 Aug 2026
- last update
- 13 Aug 2026
- CVE ids
Timeline · 1
Sources · 1
Advisories and databases
- 2026-08-13CVE-2026-73601: Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is…NVD · nvd.nist.gov/vuln/detail/CVE-2026-73601
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 13 Aug 2026 · first reported 13 Aug 2026
- origin
- NVDVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CVE-2026-73601: Remote code execution in Flowise Custom MCP node https://gcdradar.vercel.app/incidents/cve-2026-73601-remote-code-execution-in-flowise-custom-mcp-n · AIR-2026-1278 · closed 2026-08-13 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2026-08-13 - AI role: Attack on AI - Products: Flowise - CVE ids: CVE-2026-73601 - CVSS: 9 ## Summary Flowise contains a remote code execution vulnerability in the Custom MCP node when configured with specific protocol settings. Attackers can manipulate environment variables to execute arbitrary system commands. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-08-13: CVE-2026-73601: Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is… (https://nvd.nist.gov/vuln/detail/CVE-2026-73601) ## Sources - 2026-08-13 NVD: CVE-2026-73601: Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is… https://nvd.nist.gov/vuln/detail/CVE-2026-73601 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed7.5Flowise CVE-2026-90535: Flowise Denial of Service Vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90535
AI - closed6.5Flowise CVE-2026-90533: Flowise broken access control vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90533
AI - closed6.5Flowise CVE-2026-90534: Flowise credential resolution permission bypass
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90534
AI - closed9.8Flowise CVE-2026-52098: Flowise remote code execution vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-52098
AI - closed8.6Flowise CVE-2026-73484: Flowise pythonCodeValidator sandbox escape vulnerability
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73484
AI - closed6.3Flowise CVE-2026-73603: Chatflow visibility bypass in Flowise TTS endpoint
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73603
AI