Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

Flowise, an open-source AI platform, has a maximum-severity code injection vulnerability (CVE-2025-59528, CVSS 10.0) in its CustomMCP node that can execute arbitrary JavaScript with full Node.js privileges leading to remote code execution, file system access, command execution, and data exfiltration; VulnCheck reports active exploitation originating from a Starlink IP and notes 12,000+ internet-facing instances, while Flowise issued a fix in npm package version 3.0.6.