CVE-2026-91932
Flowise before 3.1.4 Remote Code Execution via cwd Parameter
- State
- Published
- Severity
- 9.0 Critical
- Published
- Sep 15, 2026
- Updated
- Sep 15, 2026
- Reserved
- Sep 15, 2026
Description
Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attackers remote code execution through an unvalidated cwd parameter. Attackers can bypass path validation using clean filenames in the args array while controlling the working directory to execute malicious code.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.0 Critical | CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H | VulnCheck |
| 3.1 | 8.5 High | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-20 Improper Input Validation
Affected Products
| Product | Versions |
|---|---|
FlowiseFlowiseAI |
|
FlowiseFlowiseAI |
|
References
- GitHub Security Advisory (GHSA-x7x8-95gh-42xm)vendor-advisory
- VulnCheck Advisory: Flowise before 3.1.4 Remote Code Execution via cwd Parameterthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.