CVE-2025-59528

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 7, 2026

Last Seen

April 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Flowise RCE Vulnerability Exploited, Thousands of Systems at Risk72.9

A critical remote code execution (RCE) vulnerability in the Flowise low-code platform, tracked as CVE-2025-59528, is being actively exploited by threat actors. This flaw allows attackers to inject arbitrary JavaScript code due to improper validation of user input in the CustomMCP node, which connect...

Critical Langflow RCE Vulnerability Exploited Within 20 Hours72.8

A critical vulnerability in Langflow, tracked as CVE-2026-33017, allows unauthenticated remote code execution (RCE) via the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint. This flaw was exploited within 20 hours of its disclosure on March 20, 2026, with the first successful data exfiltration...