CVE-2026-91931CWE-78command-injection

CVE-2026-91931

High · published September 15, 2026

CVSS v3.1
8.5
EPSS
1%
Percentile
51.6
In the wild
Unconfirmed
What it is

Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package names in the mcpServerConfig parameter. Attackers can invoke npx with attacker-controlled npm packages to execute code on the Flowise server.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
9.0 · CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00675 · 51.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-09-15T20:17Z
References (3)
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vcwp-f9rq-3887 · [email protected]https://www.vulncheck.com/advisories/flowise-before-3.1.4-remote-code-execution-via-custom-mcp-npx · [email protected]https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vcwp-f9rq-3887 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 17 SEP 03:33Z
    EPSS moved — → 1%
    epss
  • 15 SEP 15:17Z
    Flowise before 3.1.4 Remote Code Execution via Custom MCP npx
    cvelistv5