CVE-2026-56274

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 23, 2026

Last Seen

June 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Remote Code Execution Flaw Discovered in Flowise MCP Server78.0

Flowise has disclosed a critical remote code execution vulnerability, tracked as CVE-2026-56274, affecting versions prior to 3.1.2 of its Custom MCP Server feature. The flaw allows attackers to exploit multiple OS command injection paths in the validateCommandFlags and validateArgsForLocalFileAccess...