Flowise has an MCP Security Bypass that Enables RCE

Description

There are three bypass methods for the security limitations of the Flowise MCP feature, and attackers can execute arbitrary commands by combining these three methods

Recommendation

Update the flowise-components package to the latest compatible version. Followings are version details:

• Affected version(s): <= 3.1.1
• Patched version(s): 3.1.2

References

• GHSA-m99r-2hxc-cp3q
• CWE-184
• OWASP 2021-A3

Related Issues

• Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) - CVE-2026-69263
• Flowise: Authenticated RCE Via MCP Adapters - CVE-2026-40933
• Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE - CVE-2026-70470
• Flowise Execute Flow function has an SSRF vulnerability - Vulnerability

You might also like:

CSRF, XXE, and 12 Other Security Acronyms Explained

3 reasons why any website's security is important

5 Security Vulnerabilities You Can Fix Right Now

Tags:

npm

flowise-components