Paper/Archive/CVE-2026-73601

CVE-2026-73601

FlowiseAI Flowise — Flowise before 3.1.3 Remote Code Execution via Custom MCP

CVSS 9.0 (CNA)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 65.7.657 × 2013.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and BROWSER environment variables with python3, or leverage the root working directory with node to bypass validation and execute system commands.

Affected

ProductAffectedFixed inSource

Flowise< 3.1.33.1.3CNA

Scores by source

VulnCheck (CNA)9.0CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygithub.com/FlowiseAI/Flowise/security/advisories/GHSA-g98q-rm45-q9h8 writeupvulncheck.com/advisories/flowise-before-remote-code-execution-via-custom-mcp