CVE-2025-59528

This exploit leverages an authenticated RCE vulnerability in Flowise < 3.0.5 by injecting a malicious payload into the `customMCP` API endpoint, which executes arbitrary commands via Node.js `child_process.execSync`.

This repository contains a detailed technical writeup for CVE-2025-59528, focusing on a prototype pollution vulnerability in a Node.js application. It includes a step-by-step analysis of the vulnerability, exploitation steps, and patching guidance.

This repository contains a functional exploit chain for CVE-2025-58434 (unauthenticated account takeover via password reset token disclosure) and CVE-2025-59528 (authenticated RCE via CustomMCP node JS injection) in Flowise <= 3.0.5. The Python script automates the full attack chain, including password reset, API key retrieval, and command execution or reverse shell setup.

This repository contains a functional Python exploit for chaining CVE-2025-58434 (account takeover via password reset token exposure) and CVE-2025-59528 (RCE via unsafe JavaScript evaluation in Flowise's CustomMCP node). The exploit includes full attack flow automation, from vulnerability checks to authenticated RCE.

This repository contains a functional Python exploit for chaining two Flowise vulnerabilities: CVE-2025-58434 (account takeover via exposed password reset tokens) and CVE-2025-59528 (RCE via unsafe JavaScript evaluation in the CustomMCP node). The exploit includes full attack chain automation, from vulnerability checks to authenticated RCE.

This repository contains a functional Go-based exploit for CVE-2025-59528, which targets a remote code execution vulnerability in Flowise versions <= 3.0.5. The exploit leverages unvalidated JavaScript execution via the `mcpServerConfig` parameter to achieve arbitrary command execution.

This is a detailed technical writeup for the HackTheBox machine 'Silentium', which chains three CVEs (CVE-2025-58434, CVE-2025-59528, and CVE-2025-8110) to achieve full system compromise. It includes step-by-step exploitation details, code snippets, and technical analysis of each vulnerability.

This repository contains a functional Python exploit for CVE-2025-59528, an authenticated RCE vulnerability in Flowise <= 3.0.5 via the CustomMCP Node. The exploit leverages a crafted JSON payload to execute arbitrary system commands through Node.js child_process module.

This repository contains a functional PoC for CVE-2025-59528, demonstrating RCE in Flowise via JavaScript injection in the `mcpServerConfig` parameter. The exploit leverages `child_process` to execute arbitrary commands on the server.

This repository contains a functional Python PoC for CVE-2025-59528, which exploits a command injection vulnerability in Flowise via the `/api/v1/node-load-method/customMCP` endpoint. The script authenticates, extracts session tokens, and sends a crafted payload to achieve remote code execution.

This repository contains a functional exploit script that chains CVE-2025-58434 (account takeover via unauthenticated forgot-password token) and CVE-2025-59528 (RCE in FlowiseAI Custom MCP Node) to achieve remote code execution. The script automates the attack by resetting the password and injecting a reverse shell payload.

This repository contains a functional exploit for CVE-2025-59528, which chains an account takeover (CVE-2025-58434) with a remote code execution vulnerability in Flowise via a CustomMCP node injection. The exploit includes steps for password reset, API key retrieval, and command execution or reverse shell setup.

The repository contains a functional Python-based exploit for CVE-2025-59528, demonstrating authenticated RCE in Flowise AI <= 3.0.4 via JavaScript injection into the customMCP endpoint. The PoC includes authentication, payload delivery, and command execution using Node.js's child_process module.

This repository contains a functional Python script that exploits CVE-2025-59528, an authenticated remote code execution (RCE) vulnerability in FlowiseAI's Flowise application (versions <= 3.0.5). The exploit leverages a vulnerable endpoint to inject and execute arbitrary commands via a crafted JSON payload.

The repository contains a functional Python exploit for CVE-2025-59528, targeting Flowise's customMCP node. It leverages unsafe JavaScript evaluation via the Function constructor to achieve remote code execution (RCE) by injecting a reverse shell payload or arbitrary commands.

This repository contains a functional exploit for CVE-2025-59528, a critical RCE vulnerability in FlowiseAI's CustomMCP node. The exploit leverages the unsafe use of JavaScript's Function() constructor to execute arbitrary commands via crafted input to the mcpServerConfig parameter.

This repository contains a functional exploit for CVE-2025-59528, demonstrating an account takeover (ATO) followed by remote code execution (RCE) in Flowise versions prior to 3.0.5. The exploit chains password reset abuse with a prototype pollution vulnerability in the `customMCP` endpoint to achieve arbitrary command execution.

This repository contains a functional exploit chain for CVE-2025-58434 (unauthenticated account takeover via password reset token disclosure) and CVE-2025-59528 (authenticated RCE via CustomMCP node JS injection in Flowise). The Python script automates the full attack chain, including password reset, API key retrieval, and command execution or reverse shell setup.

This repository contains a functional exploit PoC for CVE-2025-59528, which chains an unauthenticated password reset token disclosure (CVE-2025-58434) with a remote code execution vulnerability in FlowiseAI. The exploit demonstrates a complete kill chain from zero credentials to a root shell inside a Docker container.

This repository contains a functional exploit PoC for CVE-2025-58434 (account takeover) and CVE-2025-59528 (RCE) in Flowise. The exploit chains both vulnerabilities to achieve unauthenticated RCE via a reverse shell payload.

This Metasploit module exploits a JavaScript injection vulnerability in Flowise's customMCP endpoint, allowing arbitrary command execution via the mcpServerConfig parameter. It supports both authenticated and unauthenticated exploitation depending on the target version.