Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

/in

Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings from VulnCheck.
The vulnerability in question is CVE-2025-59528 (CVSS score: 10.0), a code injection vulnerability that could result in remote code execution.
“The CustomMCP node allows users to input configuration settings for connecting

The Hacker News – ​Read More

Wynn Resorts Says 21,000 Employees Affected by ShinyHunters HackCommon Entra ID Security Assessment Findings – Part 3: Weak Privileged Identity Management ConfigurationCommon Entra ID Security Assessment Findings – Part 3: Weak Privileged Identity...