Description
There are three bypass methods for the security limitations of the Flowise MCP feature, and attackers can execute arbitrary commands by combining these three methods
Recommendation
Update the flowise-components package to the latest compatible version. Followings are version details:
- Affected version(s): <= 3.1.1
- Patched version(s): 3.1.2
References
Could your website be exposed too?
SmartScanner can check your website for Flowise has an MCP Security Bypass that Enables RCE and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) - CVE-2026-69263
- Flowise: Authenticated RCE Via MCP Adapters - CVE-2026-40933
- Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE - CVE-2026-70470
- Flowise Execute Flow function has an SSRF vulnerability - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated May 15, 2026