CriticalVulnerabilityLLM-specific

CVE-2025-59434: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025…

Source: NVD(opens in a new tab)
Identifier: CVE-2025-59434
Published: September 22, 2025
Record updated: October 9, 2026

Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS: 4.0%

Summary

CVE-2025-59434 affects Flowise Cloud, the cloud-hosted version of Flowise, prior to August 2025. An authenticated user on the free tier can use the Custom JavaScript Function node to read sensitive environment variables belonging to other tenants, including OpenAI API keys, AWS credentials, Supabase tokens, and Google Cloud secrets, resulting in full cross-tenant data exposure.

Mitigation

This issue has been patched in the August 2025 Cloud-Hosted Flowise.

Details

Scores and exploitation

CVSS score: 9.6(critical)
EPSS: 4.0%Estimated probability that this CVE is exploited in the next 30 days, from the FIRST Exploit Prediction Scoring System. Read on November 4, 2026.

Weaknesses and techniques

Weakness (CWE): CWE-200
CWE-284
Attack pattern (CAPEC): CAPEC-116

Classification

Attack type: Data extraction
Attack sophistication: Trivial
AI component targeted: Plugin
Impact: Confidentiality
Labels: security

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-59434

First tracked: February 15, 2026 at 08:49 PM ET, from NVD/CVE Database

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 95% (self-assessed)

Summary

Mitigation

Related items