Flowise

Flowise Enterprise Authentication Bypass via Hardcoded Default JWT Secrets (CVE-2026-56271) newCVE-2026-56271webCRITICAL 9.8Patched2026-07-12Flowise CustomMCP Unauthenticated Remote Code Execution via Function() Constructor (CVE-2025-59528) new EPSS 87%CVE-2025-59528webCRITICAL 10Patched2026-07-06Flowise NVIDIA NIM Endpoint Authentication Bypass — CVE-2026-30824 new EPSS 36%CVE-2026-30824webCRITICAL 9.8Patched2026-07-05Flowise Custom MCP Environment Variable Case Bypass newNone assigned as of 2026-07-03webHIGHUnverified2026-07-03