CVE-2026-69263CWE-184

CVE-2026-69263

Critical · published August 4, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
51.0
In the wild
Unconfirmed
What it is

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, and NODE_OPTIONS by exact environment-variable name. Because npm reads configuration from npm_config_* variables, setting npm_config_yes=true reproduced --yes behavior without using a blocked flag, causing npx to auto-install and execute the named package when a Custom MCP server launched. This issue is fixed in version 3.1.3.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00662 · 51.0th percentile
Weakness
CWE-184 · Incomplete List of Disallowed Inputs
Published
2026-08-04T21:17Z
Affected products (1)
ProductVersionsFixed in
flowiseai/flowise< 3.1.33.1.3
References (5)
https://github.com/FlowiseAI/Flowise/commit/a4c4e4988cded15edf725e762560575b889ae351 · [email protected]https://github.com/FlowiseAI/Flowise/pull/6471 · [email protected]https://github.com/FlowiseAI/Flowise/releases/tag/[email protected] · [email protected]https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc48-889x-5qmw · [email protected]https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc48-889x-5qmw · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 04 AUG 16:54Z
    Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
    cvelistv5