Exploit for Missing Authentication for Critical Function in Flowiseai Flowise

CVE-2025-58434

githubexploit · 2026-06-26

Description

Exploit report for missing authentication in Flowiseai CVE-2025-58434 enabling bypass of a critical function.

Affected Flowiseai Flowise versions

Flowiseai Flowise< 3.0.6

All known vulnerabilities by product

Flowise

CVSS 9.8 for CVE-2025-58434

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

62%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

49.9%higher than 98.8% of all CVEs

Updated 2026-09-03

Exploit Details

Modified:2026-06-26 21:18

Last Seen:2026-06-26 21:23

Reporter:00lucasm

Written in:Python

Last commit:2026-06-26

Other exploits for CVE-2025-58434

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

2026-09-03 KitPloitKITPLOIT

CVE-2025-58434-AND-59528-POC

2026-09-02 KitPloitKITPLOIT

CVE-2025-58434_CVE-2025-59528

2026-09-02 KitPloitKITPLOIT

HTB-Silentium-Writeup

2026-09-02 KitPloitKITPLOIT

CVE-2025-58434-poc

2026-09-01 KitPloitKITPLOIT

CVE-2025-58434-PoC

2026-08-31 KitPloitKITPLOIT

CVE-2025-58434-Flowiseai-Auth-Bypass-PoC

2026-08-31 KitPloitKITPLOIT

CVE-2025-58434-59528

2026-08-31 KitPloitKITPLOIT

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=A04B552D-BE53-596B-87C1-62CAF8B1227A
# CVE-2025-58434 Flowiseai Auth Bypass PoC

Exploit Code

Share

Share on social media: