Critical RCE Vulnerability in Flowise Platform Actively Exploited

A maximum severity (CVSS 10) remote code execution vulnerability in the Flowise AI platform allows attackers to inject arbitrary JavaScript code through unsafe evaluation of user input in the CustomMCP node. With 12,000-15,000 instances exposed online, this represents a massive attack surface for threat actors seeking to compromise AI infrastructure. The vulnerability demonstrates how input validation failures in AI platforms can lead to complete system compromise, especially when these systems are directly internet-accessible.

Tactical Insight

Immediate actions

Upgrade all Flowise instances to version 3.1.1 or 3.0.6 immediately
Scan for and inventory all internet-facing Flowise deployments across your organization
Temporarily restrict network access to Flowise instances until patching is complete

Long-term improvements

Implement automated vulnerability scanning specifically for AI/ML platforms and open-source components
Establish emergency patching procedures with defined SLAs for critical vulnerabilities
Maintain comprehensive asset inventory including all AI development tools and platforms

Detection measures

Monitor for suspicious JavaScript execution or code injection attempts in application logs
Implement network monitoring to detect unusual outbound connections from AI platforms