OS Command Injection Vulnerabilities in Flowise by FlowiseAI

CVE-2026-56274

What is CVE-2026-56274?

Flowise versions prior to 3.1.2 are susceptible to multiple OS command injection vulnerabilities within the Custom MCP Server feature. These flaws result from inadequate validation of command flags and the ability to bypass regex checks related to local file access. An attacker with valid Flowise account credentials or API access that grants permissions for chatflows can exploit these vulnerabilities. This includes the ability to configure a malicious MCP server, effectively circumventing the validateCommandFlags blocklist. For instance, commands like 'docker build' and 'npx --yes' are not properly blocked, potentially allowing arbitrary commands to be executed on the host system.

References