CVE-2025-8943

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

April 7, 2026

Last Seen

April 8, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Flowise RCE Vulnerability Exploited, Thousands of Systems at Risk72.9

A critical remote code execution (RCE) vulnerability in the Flowise low-code platform, tracked as CVE-2025-59528, is being actively exploited by threat actors. This flaw allows attackers to inject arbitrary JavaScript code due to improper validation of user input in the CustomMCP node, which connect...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Flowise RCE Vulnerability Exploited, Thousands of Systems at Risk

Apr 7·4 sources

Related Articles (4)

Hackers exploit a critical Flowise flaw affecting thousands of AI workflows

Csoonline·Apr 8

Critical Flowise RCE Vulnerability Actively Exploited, Thousands of Systems at Risk

Thecyberexpress·Apr 8

Max severity Flowise RCE vulnerability now exploited in attacks

Bleepingcomputer·Apr 7

Max severity Flowise RCE vulnerability now exploited in attacks

Bleepingcomputer·Apr 7

Related Entities

Zero-day Exploit Remote Code Execution T1059.007 - JavaScript T1190 - Exploit Public-Facing Application Flowise MCP YARA Docker Node.js