CVE Explorer

CVE-2025-8943

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:aa1805db6d2bbad498d5757d12471ca204ab0784f98f668bdfa8be446211c914

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:78f265b853381f119c42c54dee59a13d1b347b8544feda874f0c9b2591ed9c03 · sha256:45eeea894c04e068… · /containers/adp/0/problemTypes/0/descriptions/0

{"cweId":"CWE-862","description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:78f265b853381f119c42c54dee59a13d1b347b8544feda874f0c9b2591ed9c03 · sha256:45eeea894c04e068… · /containers/adp/0/problemTypes/1/descriptions/0

Affected products and versions

1 source assertion

{"collectionURL":"https://www.npmjs.com","packageName":"flowise","versions":[{"lessThan":"3.0.1","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:78f265b853381f119c42c54dee59a13d1b347b8544feda874f0c9b2591ed9c03 · sha256:45eeea894c04e068… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:78f265b853381f119c42c54dee59a13d1b347b8544feda874f0c9b2591ed9c03 · sha256:45eeea894c04e068… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:78f265b853381f119c42c54dee59a13d1b347b8544feda874f0c9b2591ed9c03 · sha256:45eeea894c04e068… · /containers/adp/0/problemTypes/0/descriptions/0

{"cweId":"CWE-862","description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:78f265b853381f119c42c54dee59a13d1b347b8544feda874f0c9b2591ed9c03 · sha256:45eeea894c04e068… · /containers/adp/0/problemTypes/1/descriptions/0

Source references

1 source assertion

{"tags":["third-party-advisory"],"url":"https://research.jfrog.com/vulnerabilities/flowise-os-command-remote-code-execution-jfsa-2025-001380578/"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:78f265b853381f119c42c54dee59a13d1b347b8544feda874f0c9b2591ed9c03 · sha256:45eeea894c04e068… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer