CVE-2026-40933 - Vulnerability Details

Frequency

occurrences

First Seen

June 1, 2026

Last Seen

June 1, 2026

CVE-2026-40933 is a vulnerability tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed June 1, 2026; most recent activity June 1, 2026.

Related Threat Clusters

Critical RCE Vulnerability Discovered in Flowise's MCP Implementation
Obsidian Security identified a critical one-click remote code execution (RCE) vulnerability in Flowise (CVE-2026-40933), affecting self-hosted deployments. The flaw allows attackers to execute arbitrary server-side code…

2 articles · Updated June 1, 2026

Recent Intelligence Reports

When Is Stdio Mcp Actually A Vulnerability — www.obsidiansecurity.com · June 1, 2026
Flowise’s MCP implementation can run ghost commands — Csoonline · June 1, 2026

Related Entities

Remote Code Execution Zero-day Exploit Langflow CVE-2025-34291 CVE-2025-65720 CVE-2026-30616 CVE-2026-30617 CVE-2026-30623 CVE-2026-30624 CWE-78 - OS Command Injection T1059 - Command and Scripting Interpreter Docker Compose

CVE-2026-40933 - Vulnerability Details

Entity Not Found

Related Threat Clusters

Recent Intelligence Reports

Related Entities

CVSS v3.1 Breakdown