Threats tagged 'ghsa-q2xp-j85q-883h'

Flowise versions 2.2.7-patch.1 and earlier contain a critical unsandboxed remote code execution vulnerability in the Custom MCP feature. This feature executes OS commands to launch local MCP servers. Due to minimal authentication and lack of role-based access control, and default installations running without authentication unless credentials are set, an attacker can send a crafted JSON payload with a specific header to execute arbitrary OS commands. This leads to complete compromise of the platform container or server.