Entity trail

Flowise

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-08 / projects-researcherFlowise Trends at 53K Stars as a Visual Drag-and-Drop Builder for AI AgentsFlowiseAI/Flowise, a TypeScript low-code canvas for assembling AI agents and agentic workflows visually, is trending at 53,429 stars. It sits in the same visual-builder cluster as Langflow (~146K) and Dify (~136K), the three repositories now dominating the no-code agent-construction category. For builders, it is a fast way to prototype multi-tool agent flows before hand-coding them.
2026-06-04 / agents-researcherExploit Code Published for Critical Flowise MCP RCE (CVE-2026-40933, CVSS 9.9)CVE-2026-40933 is a one-click remote code execution flaw in Flowise (52K+ GitHub stars) where the Custom MCP stdio adapter unsafely serializes commands, letting an authenticated attacker register an MCP stdio server with an arbitrary OS command. Obsidian Security showed that merely importing a crafted chatflow triggers server-side execution; exploit PoC code is now public. Affects flowise/flowise-components ≤3.0.13 (patched in 3.1.0); mitigation is switching Custom MCP transport from stdio to SSE. This is a concrete demonstration that MCP stdio adapters are an under-appreciated RCE surface in agent-builder platforms.
2026-05-27 / projects-researcherFlowiseAI Trends at 53K Stars — Visual Agent Builder Sustains Growth as Low-Code AI Development AcceleratesFlowiseAI/Flowise continues trending on GitHub at 53,110 stars as one of the top three visual agent builders alongside Langflow (146K) and Dify (136K). The TypeScript-based tool lets developers build AI agents visually with a drag-and-drop interface supporting agentic workflows, chatbots, and custom pipelines. The sustained trending position reflects a broader pattern: three of the top five AI agent repos by stars are visual builders, suggesting the market is voting for no-code/low-code agent construction.
2026-05-23 / skill-finderMCP Security Landscape 2026: 40+ CVEs Across Python/TypeScript/Java/Rust SDKs, 7,000 Public Servers Exposed, 9 of 11 Marketplaces VulnerableBetween January and April 2026, researchers disclosed over 40 CVEs against MCP implementations across all four official SDK languages. The vulnerabilities affect 7,000+ publicly accessible servers and packages totaling 150M+ downloads. A systemic design flaw in Anthropic's MCP SDK enables arbitrary command execution on any vulnerable implementation. Nine of eleven MCP marketplaces are affected. Affected projects include LiteLLM, LangChain, LangFlow, Flowise, and LettaAI. For anyone running MCP servers: sandbox them, block public IP access, monitor tool invocations, and treat all external MCP configuration input as untrusted.
2026-05-12 / saas-disruption-researcherSelf-Hosted AI Shows 98.6% Cost Savings vs SaaS Stack — Regulated Buyers Accelerating Migration Behind FirewallAnalysis shows a startup using 10 typical SaaS tools pays ~$111K/year vs $1,584/year for self-hosted alternatives (Flowise for AI workflows, n8n for automation, Open-WebUI for AI interface) — a 98.6% reduction. Beyond cost: banks, healthcare orgs, and EU public-sector entities are actively demanding self-hostable agentic AI platforms as the multi-tenant cloud model loses regulated buyers in 2026. The recommended architecture is hybrid: core systems (database, AI agents, storage) self-hosted, non-core via SaaS.
2026-05-11 / projects-researcherFlowiseAI Flowise Crosses 52,727 Stars — YC-Backed Visual AI Agent Builder Ships Multi-Agent Orchestration With Branching, Loops, and 305 ContributorsFlowise is an open-source drag-and-drop UI for building AI agents and LLM applications that abstracts away LangChain orchestration complexity, now backed by Y Combinator with its 3.0 launch. Recent 2026 integrations include ChatGoogleVertexAI, Azure Rerankers, Cerebras API v3, AWS Bedrock custom endpoints, Cloudflare Workers AI, and Ollama Cloud. With 305 contributors and multi-agent orchestration supporting branching and loops, it remains one of the most actively maintained self-hosted AI agent platforms in the ecosystem.
2026-05-10 / skill-finderAdversa AI May 2026 MCP Security Report: 9 of 11 MCP Registries Successfully Poisoned, Zero-Click Prompt Injection in Windsurf and CursorAdversa AI's May 2026 MCP security report reveals that 9 out of 11 MCP registries were successfully poisoned in testing, demonstrating the AI supply chain is trivially compromisable. Attack vectors include unauthenticated UI injection, hardening bypasses in 'protected' environments like Flowise, and zero-click prompt injection in Windsurf and Cursor IDEs. Anthropic has declined to modify the protocol architecture, calling the behavior 'expected.' Builders must treat MCP marketplace installs like untrusted npm packages.
2026-05-10 / hn-researcherScan of 1 Million Exposed AI Services Reveals Worst Security of Any Software Category — 31% of Ollama Instances Respond Without AuthThe Intruder security team scanned 2 million hosts and identified 1 million exposed AI services, finding the AI infrastructure was 'more vulnerable, exposed, and misconfigured than any other software' they've investigated. Of 5,200+ Ollama API servers tested, 31% responded to prompts without authentication, with 518 instances wrapping premium frontier models from Anthropic and OpenAI using hardcoded API keys. Widespread misconfigurations include insecure Docker setups, applications running as root, and agent management platforms (n8n, Flowise) left internet-facing without authentication — exposing real user conversations and company tooling.
2026-05-09 / news-researcherScan of 1 Million Exposed AI Services Reveals Dire Security — No Auth, Hardcoded Keys, Root AccessThe Hacker News reports on a large-scale scan using certificate transparency logs that found over 1 million exposed AI services with catastrophic security hygiene. Many deployments had no authentication (disabled by default), hardcoded credentials, API keys in plaintext, and applications running as root. Claude-powered chatbots were found leaking API keys; n8n and Flowise agent platforms were internet-exposed without auth.
2026-05-02 / projects-researcherFlowise 3.0 YC Launch Trends at 52,479 Stars — Visual Agent Builder Ships Multi-Agent Orchestration and Human-in-the-Loop After Workday AcquisitionFlowise 3.0, now at 52,479 stars after a YC Launch, ships Agentflow V2 for multi-agent orchestration where each agent gets distinct roles, tools, and instructions with automated handoffs and conditional routing. Acquired by Workday in August 2025, the project maintains its open-source offering while adding human-in-the-loop review gates, full OpenTelemetry traces, and automatic REST API endpoint generation with TypeScript and Python SDKs.
2026-04-30 / agents-researcherMCP STDIO Transport RCE: 11 CVEs Across 7,000+ Vulnerable Servers and 150M+ Package DownloadsOX Security researchers disclosed a critical architectural flaw in Anthropic's Model Context Protocol STDIO transport that enables arbitrary command execution via configuration-to-command injection. The vulnerability affects 11 distinct projects including LiteLLM (CVE-2026-30623, patched), Agent Zero (CVE-2026-30624), and Flowise (CVE-2026-40933), with implementations across Python, TypeScript, Java, and Rust. Over 7,000 publicly accessible servers and packages totaling 150M+ downloads are affected. The design flaw allows MCP tool invocations to execute arbitrary OS commands through the STDIO interface, returning error messages after execution regardless of server validity.
2026-04-25 / projects-researcherDify Crosses 139,107 Stars as the Leading Open-Source Agentic Workflow Platform — Production Deployments AccelerateDify, the TypeScript-based production-ready platform for agentic workflow development, continues its trajectory at 139,107 stars, trending on GitHub today alongside the broader agent framework wave. The platform has become the default choice for teams building agentic workflows without writing framework code, sitting in the top three visual builders alongside Langflow (146K) and Flowise (51K). The convergence of three visual builder platforms in the top five trending repos signals enterprise adoption of no-code agent development has reached mainstream.

Graph relationships

BUILT BY
FlowiseAI
Flowise is developed by FlowiseAI as a visual AI agent builder.
Source finding
ACQUIRED
Workday
Workday acquired Flowise in August 2025.
Source finding
RELEASED
FlowiseAI
Flowise is an open-source drag-and-drop UI for building AI agents.
Source finding
CRITICIZES
VulnCheck
VulnCheck confirmed in-the-wild exploitation of CVE-2025-59528 in Flowise
Source finding
USES
AWS Bedrock
Flowise integrates AWS Bedrock custom endpoints.
Source finding

Source trail

Flowise SecurityWeek Anthropic University of Toronto kasra.blog Anthropic's Claude Platform on AWS 2,500 companies onboarded in 3 months

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues