CVE-2025-59528-PoC

CVE-2025-59528 RCE Python #poc #github #cve-2025-59528 #rce

Author

Loaxert

Published

2026-08-09

Stars

0

Forks

0

Repository

Loaxert/CVE-2025-59528-PoC

Description

PoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB

View on GitHub More PoCs for CVE-2025-59528

CVE-CVE-2025-59528 Details

Severity

CRITICAL

CVSS Score

10.0

CWE

CWE-94

Description

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString f...

View on NVD

Related PoCs for CVE-2025-59528

No other PoCs found for this CVE.