TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8751
@thehackernews
The Hacker News
Post content
Post content
π Flowise has a CVSS 10.0 RCE flaw (CVE-2025-59528) now under active attack. A bug in MCP config lets attackers run JavaScript with full system access using just an API token. Over 12,000 exposed instances raise risk. π Exploitation details β https://thehackernews.com/2026/04/flowise-ai-agent-builder-under-active.html