Vulnerability Report

CVE-2025-8943

Title: Flowiseai Flowise Auth Bypass

Auth Bypass

Proof Of Concept

PoC Available for CVE-2025-8943

CWE Category CWE-306

Published Date Aug 14, 2025

Modified Date Sep 23, 2025

Exploit Status Available

Score 9.8 CVSS v3.1

Exploit Probability (EPSS)

72.31%

Vulnerability Summary

CVE-2025-8943: The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.

Impacted Vendors

flowiseai 1

Reference Links

https://research.jfrog.com/vulnerabilities/flowise-os-command-remote-code-execution-jfsa-2025-001380578/

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

9.8

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2025-8943 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/Ashwesker/Blackash-CVE-2025-8943

View Code

September 23, 2025 MODIFIED

Vulnerability data or affected products updated.

September 23, 2025 MODIFIED

Vulnerability data updated via NVD.

August 14, 2025 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Stack

No specific products linked.