Home / Apr 08, 2026 / Story
0
#5 BleepingComputer general April 07, 2026 at 17:02 UTC

Max severity Flowise RCE vulnerability now exploited in attacks

By Bill Toulas

AI Summary

Hackers are actively exploiting CVE-2025-59528, a maximum-severity vulnerability in the Flowise AI platform that allows remote code execution through improper validation of user-supplied JavaScript. Over 12,000 Flowise instances are exposed to the internet, with VulnCheck confirming active exploitation of the CVSS 10.0 flaw.

Relevance score: 88.0/100

# More from April 08