🧰 Flowise

The items that name it 13

• The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
  articleas affected products2026-10-29It is written here as Flowise (unauthenticated RCE, SSRF, arbitrary file read, path traversal and arbitrary write probed; MCP stdio-transport RCE endpoint /stdio-rce-a).

  unauthenticated RCE, SSRF, arbitrary file read, path traversal and arbitrary write probed; MCP stdio-transport RCE endpoint /stdio-rce-a

• The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
  writeupas affected products2026-10-29It is written here as Flowise (unauthenticated RCE via POST /api/v1/node-custom-function; 1.x-specific fetch-links SSRF and arbitrary file read; get-upload-file path traversal; attachments arbitrary write; customized WHITELIST_URLS with 42 entries versus standard 20).

  unauthenticated RCE via POST /api/v1/node-custom-function; 1.x-specific fetch-links SSRF and arbitrary file read; get-upload-file path traversal; attachments arbitrary write; customized WHITELIST_URLS with 42 entries versus standard 20

• Top AI agent security resources — October 2026
  articleas affected products2026-10-04
• Vulnerability Discovery and Exploitation Trends in the AI Era (Google Cloud)
  articleas affected products2026-09-30

  Visual workflow builder (agent orchestration framework) deploying dynamic code execution nodes exploited via prompt injection or crafted workflow JSONs.

• [tl;dr sec] #345 - Bug Rumors → Exploits, Version Control DFIR, Agentic Worms
  articleas affected products2026-09-10
• Inside 90 days of attacks on AI infrastructure
  writeupas affected products2026-08-27

  AI framework honeypotted; targeted in blind prompt injection attacks; ships unauthenticated by default.

• How AI orchestration platforms ship RCE by design | Ebook/Report | Endor Labs
  paperas affected products2026-08-26
• Hacking your life with AI can get you hacked | Blog | Endor Labs
  writeupas affected products2026-08-18

  38-pattern regex blocklist over Pyodide runtime bypassed via \bimport\b word-boundary bug and chr()-encoded code; Pyodide js bridge reaches Node's process.mainModule.require('child_process'); unauthenticated RCE via /api/v1/prediction/<uuid>. Development ceased 2026-07-29; repository archived 2026-0

• GoogleCloudPlatform/k8s-aibom
  repoas affected products2026-07-18
• Vulnerability Database - OSV
  advisoryas classification.technologies
• Flowise MCP Security Bypass Enables RCE
  advisoryas affected products
• OpenAnt: LLM-Powered Vulnerability Discovery Through Code Decomposition, Adversarial Verification, and Dynamic Testing
  paperas affected products

  evaluated as target codebase for vulnerability discovery

• DVLAA
  repoas affected products

  AWDP01-10 映射的公开披露开源 AI 项目之一

In every workspace you can read 15