Exploit for Flowise-RCE

CVE-2025-58434 CVE-2025-59528

kitploit · 2026-08-28

Description

Remote code execution in Flowise via two vulnerabilities CVE-2025-58434 and CVE-2025-59528.

Affected Flowiseai Flowise versions

Flowiseai Flowise< 3.0.6, 3.0.5

All known vulnerabilities by product

Flowise

CVSS Score

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

87.4%higher than 99.7% of all CVEs

Updated 2026-09-02

Exploit Details

Modified:2026-08-28 22:39

Last Seen:2026-08-29 10:09

Reporter:KitPloit

Other exploits for the same CVE

CVE-2025-58434-AND-59528-POC

2026-09-02 KitPloitKITPLOIT

CVE-2025-58434_CVE-2025-59528

2026-09-02 KitPloitKITPLOIT

HTB-Silentium-Writeup

2026-09-02 KitPloitKITPLOIT

CVE-2025-59528-Flowise-RCE

2026-09-02 KitPloitKITPLOIT

CVE-2025-58434-poc

2026-09-01 KitPloitKITPLOIT

CVE-2025-59528.yaml

2026-09-01 KitPloitKITPLOIT

CVE-2025-58434-PoC

2026-08-31 KitPloitKITPLOIT

CVE-2025-58434-Flowiseai-Auth-Bypass-PoC

2026-08-31 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-KAMIGOLD-FLOWISE-RCE
# Flowise-RCE

CVE-2025-58434 & CVE-2025-59528

Exploit Code

Share

Share on social media: