{"data":{"id":"e2f0ed54-f2bf-4959-bc2b-50193b6e54ce","title":"CVE-2026-40933: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, due to unsafe…","summary":"Flowise versions prior to 3.1.0 contain a flaw in the MCP adapter's serialization of stdio commands. An authenticated user can add an MCP stdio server through the \"Custom MCP\" configuration with an arbitrary command, bypassing validateCommandInjection and validateArgsForLocalFileAccess by pairing an allowed command such as \"npx\" with code execution arguments like \"-c touch /tmp/pwn\", which achieves command execution on the underlying OS.","solution":"Fixed in 3.1.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-40933","publishedAt":"2026-04-21T22:16:19.383Z","cveId":"CVE-2026-40933","cweIds":["CWE-78"],"cvssScore":"9.9","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flowise@<= 3.0.13 (fixed: 3.1.0)","flowise-components@<= 3.0.13 (fixed: 3.1.0)"],"affectedPackageNames":["flowise","flowise-components"],"affectedPackageRefs":["npm:flowise","npm:flowise-components"],"affectedVendors":[],"affectedVendorsRaw":["Flowise"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flowise command execution through Custom MCP stdio server configuration","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.11964,"epssCheckedAt":"2026-11-10T06:09:40.724Z","kevDateAdded":null,"advisoryAliases":["GHSA-c9gw-hvqq-f33r"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:22.071Z","patchAvailable":true,"disclosureDate":"2026-04-21T22:16:19.383Z","fixReleasedAt":"2026-03-16T14:45:59.849Z","daysToFix":-36,"fixCheckedAt":"2026-10-29T21:37:44.954Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"flowise-components","fixedVersion":"3.1.0","matchedVersion":"3.1.0","fixReleasedAt":"2026-03-16T14:45:59.849Z","daysToFix":-36,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:44.805Z"},{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.0","matchedVersion":"3.1.0","fixReleasedAt":"2026-03-16T14:47:16.783Z","daysToFix":-36,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:44.805Z"}]}}