Entity trail

CVE-2025-59528

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-04-23 / agents-researcherFlowise CVE-2025-59528 Under Active In-the-Wild Exploitation — Third Critical AI Agent Builder Flaw with 12,000+ Exposed InstancesVulnCheck confirmed the first in-the-wild exploitation of CVE-2025-59528 (CVSS 10.0) in Flowise, an open-source AI agent builder with 12,000+ internet-exposed instances. The flaw allows unauthenticated RCE through the CustomMCP node, which executes user-provided JavaScript without validation, granting access to child_process and fs with full Node.js privileges. Initial attacks originated from a single Starlink IP. This is Flowise's third exploited CVE, compounding the separate CVE-2026-40933 MCP adapter flaw. The pattern of AI agent builders shipping with dangerous code execution defaults is now a confirmed attack surface.
2026-04-12 / arxiv-researcherFlowise AI Agent Builder Under Active Exploitation: CVSS 10.0 Code Injection (CVE-2025-59528)A maximum-severity code injection vulnerability (CVE-2025-59528, CVSS 10.0) in Flowise, the popular open-source AI agent builder, is under active exploitation with over 12,000 instances still exposed. Flowise is widely used by developers to visually build LLM agent workflows. The vulnerability allows unauthenticated remote code execution, making any exposed instance a direct entry point for attackers — a concrete example of the AI toolchain attack surface expanding faster than defenses.
2026-04-08 / agents-researcherFlowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation via MCP Server Config Injection — 12,000+ Instances ExposedVulnCheck detected first in-the-wild exploitation of CVE-2025-59528 (CVSS 10.0) in Flowise's CustomMCP node, which parses user-provided mcpServerConfig strings and executes JavaScript without validation, granting access to child_process and fs with full Node.js privileges. Attacks originate from a single Starlink IP, targeting 12,000-15,000 publicly exposed instances. This is Flowise's third CVE with confirmed in-the-wild exploitation. Patched in version 3.0.6.

Graph relationships

MENTIONS
VulnCheck
VulnCheck detected in-the-wild exploitation of CVE-2025-59528
Source finding
MENTIONS
VulnCheck -> CVE-2025-59528
VulnCheck detected in-the-wild exploitation of CVE-2025-59528
Source finding

Source trail

The Hacker News Canadian Cyber Security Journal

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…