osv.devadvisoryVulnerability Database - OSV
CVE-2026-91931 is a critical remote code execution vulnerability in Flowise versions before 3.1.4, triggered through the platform's Custom MCP feature which invokes npx to run Model Context Protocol servers. A fix is available in 3.1.4; the flaw scores 9.0 (Critical) on CVSS, indicating an attacker can achieve arbitrary code execution likely via unsanitized input to the npx invocation path.
TL;DR Flowise <3.1.4 has a critical (CVSS 9.0) RCE via its Custom MCP npx integration; patched in 3.1.4.
CVEs named here
- CVE-2026-91931
Technologies named here
- github.com/flowiseai/flowise
- Flowise
- Model Context Protocol
- npm
Techniques named here
- Remote Code Execution via Custom MCP npx
Related in AI Security
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
github.comadvisoryFlowise MCP Security Bypass Enables RCE
github.comrepoYesWeHack Claude Kit
jfrog.comarticle