Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

Flowise before 3.1.4 lets logged‑in users run any code

CVE-2026-91931 · published 25 days ago
Summary

Versions of Flowise older than 3.1.4 allow someone who already has a valid login to run any program on the server. This could let an attacker take control of the system or damage data. Upgrade Flowise to version 3.1.4 or later and monitor logged‑in accounts for unusual activity.

What to do
  • Update flowiseai flowise to version 3.1.4 or later.
Affected software
VendorProductAffected versions
flowiseai flowise < 3.1.4
Original advisory text
Flowise before 3.1.4 Remote Code Execution via Custom MCP npx
Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package names in the mcpServerConfig parameter. Attackers can invoke npx with attacker-controlled npm packages to execute code on the Flowise server.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published15 Sep 2026
Updated9 Oct 2026
First seen15 Sep 2026
Sources
CVE-2026-91931 · NVD
CVE-2026-91931 · MITRE
CVE-2026-91931 · OSV
GHSA-vcwp-f9rq-3887 · GHSA
Track software like this
Free during beta