Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist…
Flowise
More for Flowise RSS feed for Flowise
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-69263
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 4, 2026
- Source last modified
- October 24, 2026
Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, and NODE_OPTIONS by exact environment-variable name. Because npm reads configuration from npm_config_* variables, setting npm_config_yes=true reproduced --yes behavior without using a blocked flag, causing npx to auto-install and execute the named package when a Custom MCP server launched. This issue is fixed in version 3.1.3.
Description quoted from the NVD record.
Who is affected
Flowise is a drag-and-drop tool for building apps that use AI language models. This flaw affects all versions before 3.1.3. It involves the Custom MCP server feature, which lets a workflow start an outside tool server to give the AI extra abilities. An earlier fix for a similar problem blocked one way of forcing automatic software installs, but a setting could still switch that behavior on. As a result, when a Custom MCP server starts, the product could automatically download and run a software package named in its setup, on the machine where Flowise runs. This flaw is rated Critical.
What to do
- If you or someone in your organization installed Flowise and runs it, that person should update it to version
3.1.3or later, which fixes this flaw. - If an IT provider or vendor runs Flowise for your organization, send them this advisory and ask when the update to version
3.1.3will be done. - If you are not sure whether your organization uses Flowise, ask the person who looks after your computers or online services to check for it.
- For more detail on the fixed release, see the vendor advisory linked on this page.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.