CVE-2025-8943: Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers
The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8943?
CVE-2025-8943 is rated as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-8943?
To mitigate CVE-2025-8943, upgrade Flowise to version 3.0.2 or later to ensure better authentication and authorization mechanisms.
What types of systems are affected by CVE-2025-8943?
CVE-2025-8943 affects Flowise versions up to 3.0.1, specifically systems using the Custom MCPs feature.
What are the potential impacts of CVE-2025-8943?
Exploitation of CVE-2025-8943 could allow an attacker to execute arbitrary OS commands, compromising the affected system.
Is there a specific mitigation strategy for CVE-2025-8943?
Yes, implementing stricter role-based access controls (RBAC) alongside the version upgrade can further enhance security against CVE-2025-8943.