Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

A critical CVSS 10.0 remote code execution vulnerability (CVE-2025-59528) in Flowise, an open-source AI platform, is under active exploitation with over 12,000 exposed instances.

• •The flaw resides in the CustomMCP node, which parses user-provided mcpServerConfig strings and executes JavaScript code without any security validation
• •Successful exploitation grants access to dangerous Node.js modules like child_process and fs, enabling full system compromise, file system access, and data exfiltration
• •Only an API token is required to exploit the vulnerability, posing extreme risk to business continuity and customer data
• •Exploitation activity has been traced to a single Starlink IP address; this is the third Flowise vulnerability observed being exploited in the wild
• •