GHSA-rh7v-6w34-w2rr: Flowise: File Upload Validation Bypass in createAttachment

Summary

Flowise's Chatflow file upload settings accept the application/javascript MIME type when a Chatflow is updated, even though the web interface does not offer JavaScript as an upload type. An authenticated attacker can therefore upload .js files and persistently store a Node.js web shell on the server, potentially leading to Remote Code Execution. The advisory describes this as a bypass of GHSA-35g6-rrw3-v6xc (CVE-2025-61687).

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumFake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents EarlySimilar attack · The Hacker News
• MediumRansomware extortion gets personal as attackers target employees’ familiesSimilar attack · CSO Online
• MediumLangflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit AttemptsSimilar attack · The Hacker News
• LowJev as a judge: How counterfeit policy steers JevSimilar attack · Datadog Security Labs
• MediumAnthropic 'SneakPeek' Flaw Is a Silent Zero-Click ThreatSimilar attack · Dark Reading