{"uuid": "9e080503-021f-4703-9d6d-92bd1cb3a57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59528", "type": "seen", "source": "https://t.me/CyberDispatch/1224", "content": "Flowise has a CVSS 10.0 RCE flaw (CVE-2025-59528) now under active attack.\n\nA bug in MCP config lets attackers run JavaScript with full system access using just an API token. Over 12,000 exposed instances raise risk.", "creation_timestamp": "2026-08-30T00:00:43.819486Z"}