Skip to content
Greeter Exploit Framework Targets Flowise AI with Stealthy Attacks

Greeter Exploit Framework Targets Flowise AI with Stealthy Attacks

First seen 5 Nov 2026, 14:46 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 14:48 UTC
  • •Greeter exploits a critical vulnerability in Flowise, allowing stealthy attacks.
  • •4,972 'hello' messages were recorded, concealing malicious commands and reconnaissance.
  • •The attack targets cloud credentials and metadata, posing risks to exposed AI infrastructures.

Security researchers at Era Security have identified a new exploitation campaign named Greeter, which targets legacy deployments of the Flowise AI platform. The attack utilizes a critical vulnerability (CVE-2024-58351) that allows attackers to inject malicious JavaScript commands through the overrideConfig parameter without altering the stored workflows. This results in benign-looking logs filled with 'hello' messages, masking extensive reconnaissance and credential theft activities. The campaign has been observed in at least 4,372 exposed Flowise instances, with a focus on extracting sensitive cloud metadata and credentials. Although the number of actively vulnerable deployments is relatively small, the attack exposes significant risks in modern AI infrastructure. Current efforts are ongoing to mitigate the impact of this stealthy exploitation method.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-06-20
CVE-2024-58351 published
A critical runtime configuration flaw in Flowise was disclosed, allowing remote code execution.
Techtarget
2026-11-03
Greeter framework discovered
Era Security's research team identified the Greeter framework, capturing 4,972 messages concealing malicious commands.
Reddit
2026-11-05
Public disclosure of Greeter campaign
Era Security published findings on the Greeter campaign, detailing its stealthy attack methods and impact.
era.security

More articles in this cluster (5)

Following this threat?

Track CVE-2024-58351 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 4

Common questions

Which versions of Flowise are affected?
The attack targets legacy, unpatched deployments of Flowise, particularly those before version 2.1.4.
Is the Greeter exploit actively being used?
Yes, researchers have confirmed active exploitation of the Greeter framework in the wild.
What should organizations do to protect themselves?
Organizations should patch Flowise to version 2.1.4 or later and monitor for unusual API activity.