Flowise Unauthenticated OS Command Execution Vulnerability Allowing Remote Code Execution

A remote code execution vulnerability has been identified in Flowise versions prior to 3.0.1. The issue arises from the Custom MCPs feature, which allows the execution of unsandboxed OS commands. In default installations of Flowise before version 3.0.1, authentication is not enabled unless specifically configured, creating an opportunity for unauthenticated network attackers to execute arbitrary commands on the operating system.

Impact

Exploitation of this vulnerability allows for unsandboxed OS command execution, leading to remote code execution on the server where Flowise is running.

Reproduction

To reproduce this vulnerability, send a payload to the 'node-load-method/customMCP' API endpoint. The payload should include a command, such as 'touch', and arguments specifying the file to be created, like '/tmp/yofitofi'.