Max severity Flowise RCE vulnerability now exploited in attacks

Summary

A critical vulnerability (CVE-2025-59528) in the open-source Flowise platform, used for building LLM applications, is being actively exploited by hackers. This vulnerability allows for arbitrary code execution, posing a significant security risk to deployed applications.

IFF Assessment

FOE

The active exploitation of a critical remote code execution vulnerability represents a direct threat to systems and data, requiring immediate defensive action.

Severity

10.0 Critical

The vulnerability is a Remote Code Execution (RCE) flaw with maximum severity, indicating it can be exploited remotely without authentication and allows attackers to take complete control of the affected system.

Defender Context

Defenders need to be aware of actively exploited RCE vulnerabilities in popular LLM development platforms like Flowise. Promptly applying patches or implementing workarounds is crucial to prevent compromise.

Read Full Story →