{"id":"EUVD-2025-210342","revision":"47fda8c1bf0744cbb4a4ea6454b262f5","records":[{"revision":"47fda8c1bf0744cbb4a4ea6454b262f5","observedAt":"2026-11-01T01:18:34.628+00:00","statement":{"source":"euvd","id":"EUVD-2025-210342","aliases":["CVE-2025-71336","GHSA-q2xp-j85q-883h"],"title":"Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnerability in the Custom MCP feature, which is designed to execute OS commands such as launching local MCP servers. Because …","description":"Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnerability in the Custom MCP feature, which is designed to execute OS commands such as launching local MCP servers. Because Flowise's authentication and authorization model is minimal and lacks role-based access control, and the default installation runs without authentication unless FLOWISE_USERNAME and FLOWISE_PASSWORD are set, an attacker can send a crafted JSON payload with the header 'x-request-from: internal' to the /api/v1/node-load-method/customMCP endpoint to execute arbitrary OS commands, resulting in complete compromise of the platform container or server.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.3,"severity":null}],"references":["https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6933-jpx5-q87q","https://www.vulncheck.com/advisories/flowise-unsandboxed-remote-code-execution-via-custom-mcp"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210342","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 25, 2026, 9:41:06 PM","dateUpdated":"Jun 30, 2026, 1:35:52 PM"},"relatedAdvisories":[{"id":"WID-SEC-W-2025-2048","title":"Flowise: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2025-58434","CVE-2025-71324","CVE-2025-71336"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-210342","identifiers":["EUVD-2025-210342","CVE-2025-71336","GHSA-q2xp-j85q-883h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}