{"uuid": "0c214552-13eb-4a5a-bd62-5b51f0c9e9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59528", "type": "exploited", "source": "https://t.me/CyberDispatch/1224", "content": "Flowise has a CVSS 10.0 RCE flaw (CVE-2025-59528) now under active attack.\n\nA bug in MCP config lets attackers run JavaScript with full system access using just an API token. Over 12,000 exposed instances raise risk.", "creation_timestamp": "2026-08-31T00:00:26.405529Z"}