Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where environment names are case-insensitive, supplying 'node_options' bypasses the NODE_OPTIONS denylist entry. An authenticated user who can configure a Custom MCP node can thereby inject NODE_OPTIONS --require and execute arbitrary code in the Flowise server context.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-58057 Authenticated Arbitrary Code Execution in Flowise Before 3.1.3 via Case-Sensitive Environment Variable Validation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-58057
Post summary
Reports CVE-2026-58057, an authenticated arbitrary code execution flaw in Flowise versions prior to 3.1.3 due to case-sensitive environment variable validation, with a link to detailed vulnerability data.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | flowiseai | flowise | - | - | - |