Menu

#Flowise

5 posts

Feed·
5 of 5 posts
One-Click RCE Hits Flowise While Gogs Zero-Day Stays Unpatched
🖼️
0Read More

One-Click RCE Hits Flowise While Gogs Zero-Day Stays Unpatched

#webpronews#flowise#gogs#self#hosted

Public PoC for Flowise CVE-2026-40933 enables one-click RCE via chatflow imports on self-hosted instances. Gogs unauthenticated RCE remains unpatched with Metasploit module available.…

15s
someone scanned 1m exposed ai services. the omnibus delay didn't fix the open ports.
🖼️
0Read More

someone scanned 1m exposed ai services. the omnibus delay didn't fix the open ports.

DEV Community·t49qnsx7qt-kpanks·6 months ago
#4Hlx8FLD
#ai#security#audit#auth#instances

From Dev.to - security: someone scanned 1m exposed ai services. the omnibus delay didn't fix the open ports.

15s
Flowise MCP RCE: What CVE-2026-40933 Teaches About Agent Security
🖼️
0Read More

Flowise MCP RCE: What CVE-2026-40933 Teaches About Agent Security

DEV Community·tokenmixai·6 months ago
#TL374i3G
#comment#ai#security#flowise#stdio

Flowise CVE-2026-40933 and Upsonic CVE-2026-30625 show why MCP STDIO should be treated as process execution, not harmless plugin config.

15s