CVE-2026-91931
Flowise before 3.1.4 Remote Code Execution via Custom MCP npx
- State
- Published
- Severity
- 9.0 Critical
- Published
- Sep 15, 2026
- Updated
- Sep 17, 2026
- Reserved
- Sep 15, 2026
Description
Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package names in the mcpServerConfig parameter. Attackers can invoke npx with attacker-controlled npm packages to execute code on the Flowise server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.0 Critical | CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H | VulnCheck |
| 3.1 | 8.5 High | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected Products
| Product | Versions |
|---|---|
FlowiseFlowiseAI |
|
FlowiseFlowiseAI |
|
References
- GitHub Security Advisory (GHSA-vcwp-f9rq-3887)vendor-advisory
- VulnCheck Advisory: Flowise before 3.1.4 Remote Code Execution via Custom MCP npxthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.