PoC Archive PoC Archive

tag

Flowise

  • CVE-2026-56271 web CRITICAL 9.8

    Flowise Enterprise Authentication Bypass via Hardcoded Default JWT Secrets (CVE-2026-56271)

    Flowise's enterprise passport authentication middleware signs and verifies JWTs using values pulled from environment variables (JWTAUTHTOKENSECRET, JWTREFRESHTOKENSECRET, JWTAUDIENCE, JWTISSUER). When an operator doesn't set these — an easy oversight in a…

    Patched 2026-07-12
  • CVE-2025-59528 web CRITICAL 10 EPSS 90%

    Flowise CustomMCP Unauthenticated Remote Code Execution via Function() Constructor (CVE-2025-59528)

    Flowise exposes a CustomMCP node whose loadMethod handler (/api/v1/node-load-method/customMCP) accepts a user-supplied mcpServerConfig string. On the backend, this string is passed straight into a Function() constructor inside the convertToValidJSONString…

    Patched 2026-07-06
  • CVE-2026-30824 web CRITICAL 9.8 EPSS 36%

    Flowise NVIDIA NIM Endpoint Authentication Bypass — CVE-2026-30824

    Flowise's global authentication middleware whitelists the /api/v1/nvidia-nim/ path, exposing NVIDIA NIM container management and API token generation endpoints to unauthenticated remote access (CWE-306: Missing Authentication for Critical Function). An…

    Patched 2026-07-05
  • None assigned as of 2026-07-03 web HIGH

    Flowise Custom MCP Environment Variable Case Bypass

    Flowise's Custom MCP stdio node validates configured environment variables against a denylist (PATH, LDLIBRARYPATH, DYLDLIBRARYPATH, NODEOPTIONS) using exact, case-sensitive string comparison. Windows, however, treats environment variable names…

    Unverified 2026-07-03