Paper/Archive/CVE-2026-91931

CVE-2026-91931

FlowiseAI Flowise — Flowise before 3.1.4 Remote Code Execution via Custom MCP npx

CVSS 9.0 (CNA)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 52.2.522 × 2010.4 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package names in the mcpServerConfig parameter. Attackers can invoke npx with attacker-controlled npm packages to execute code on the Flowise server.

Affected

ProductAffectedFixed inSource

Flowise< 3.1.43.1.4CNA

Scores by source

VulnCheck (CNA)9.0CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

VulnCheck (CNA)8.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitgithub.com/FlowiseAI/Flowise/security/advisories/GHSA-vcwp-f9rq-3887 writeupvulncheck.com/advisories/flowise-before-3.1.4-remote-code-execution-via-custom-mcp-npx