Flowise <3.1.0 Critical Flaws Allow Arbitrary Code Execution

CERT-Bund disclosed critical vulnerabilities in Flowise open-source software (versions below 3.1.0) affecting Linux and UNIX systems. The CVSS Base Score of 9.9 indicates critical severity, with a CVSS Temporal Score of 8.9 reflecting high current risk. The vulnerabilities enable remote attackers to execute arbitrary code, bypass security controls, disclose information, and manipulate files.

Organizations using Flowise should review their deployments immediately. The advisory confirms a mitigation is available, though no specific patch version or workaround details are provided in the advisory. Technology companies and developers using this LLM interface tool face immediate risk of remote code execution attacks if running affected versions.