CVE-2026-91932

Summary

Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attackers remote code execution through an unvalidated cwd parameter. Attackers can bypass path validation using clean filenames in the args array while controlling the working directory to execute malicious code.

Affected Software

VendorProductVersion RangeStatus
FlowiseAIFlowise0 < 3.1.4affected
FlowiseAIFlowise3.1.4unaffected
FlowiseAIFlowise0 < 3.1.4affected
FlowiseAIFlowise3.1.4unaffected

Weaknesses

  • CWE-20: Improper Input Validation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

Additional References

References