Skip to content
OpenAdvisories
High · 8.7 Public exploit CVE-2026-69263 EUVD-2026-52795GHSA-xc48-889x-5qmw

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Published Aug 4, 2026 · Updated Aug 4, 2026 · Assigned by GitHub_M

Vendor: FlowiseAI Product: Flowise Package: flowise Package: flowise-components Ecosystem: npm

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, and NODE_OPTIONS by exact environment-variable name. Because npm reads configuration from npm_config_* variables, setting npm_config_yes=true reproduced --yes behavior without using a blocked flag, causing npx to auto-install and execute the named package when a Custom MCP server launched. This issue is fixed in version 3.1.3.

Affected products

VendorProductAffectedFixed
FlowiseAI Flowise < 3.1.3 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • leoelsolh/CVE-2026-69263 ★ 0 · Aug 12, 2026

    MCP environment-variable blocklist bypass leads to unauthenticated RCE in Flowise 3.1.1

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
npm flowise < 3.1.3 3.1.3 GHSA-xc48-889x-5qmw
npm flowise-components < 3.1.3 3.1.3 GHSA-xc48-889x-5qmw

Advisories 1

References