Attackers exploit critical Flowise flaw CVE-2025-59528 for remote code execution

A critical vulnerability in Flowise, identified as CVE-2025-59528, is being actively exploited by attackers to achieve remote code execution and gain access to file systems. This flaw, which carries a CVSS score of 10, arises from inadequate validation of user-supplied JavaScript in a configuration function, allowing malicious code to be run and systems to be compromised. The vulnerability affects Flowise, an open-source platform used for building and managing customized large language models. Attackers can leverage this vulnerability to gain full control over affected systems, emphasizing the need for prompt mitigation. The exploitation of CVE-2025-59528 expands the active attack surface, making it essential for entities to prioritize their response based on exposure and evidence of exploitation¹. This vulnerability poses a significant threat to organizations using Flowise, and addressing it is crucial to prevent potential breaches.