Eval Injection in Flowise - CVE-2025-55346
Published: May 4, 2026
Vulnerability identifier: #VU129619
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2025-55346
CWE-ID: CWE-95
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: FlowiseAI
Affected software:
Flowise
Flowise
Detailed vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code.
The vulnerability exists due to improper neutralization of directives in dynamically evaluated code in the convertToValidJSONString function when processing the mcpServerConfig input in requests to /api/v1/node-load-method/customMCP. A remote attacker can send a specially crafted request to execute arbitrary code.
The injected JavaScript runs in the context of the host and is not sandboxed, which exposes the global process object and native Node.js modules such as child_process.
How to mitigate CVE-2025-55346
Install security update from vendor's website.