#5
BleepingComputer
general
April 07, 2026 at 17:02 UTC
Max severity Flowise RCE vulnerability now exploited in attacks
By Bill Toulas
AI Summary
Hackers are actively exploiting CVE-2025-59528, a maximum-severity vulnerability in the Flowise AI platform that allows remote code execution through improper validation of user-supplied JavaScript. Over 12,000 Flowise instances are exposed to the internet, with VulnCheck confirming active exploitation of the CVSS 10.0 flaw.
Relevance score: 88.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →