{"vulnerability": "CVE-2025-58434", "sightings": [{"uuid": "69444092-0326-46d7-bfcd-a90f8b739729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-58434", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lyohwndubm2t", "content": "", "creation_timestamp": "2025-09-13T00:01:35.995055Z"}, {"uuid": "805e3f43-3506-4432-b97e-854e8ed922af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3lytr4ci2wx22", "content": "", "creation_timestamp": "2025-09-15T02:29:07.480514Z"}, {"uuid": "93da63e4-7eaa-4396-bfc3-5dec61a94d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-58434", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyupvsm7mdb2", "content": "", "creation_timestamp": "2025-09-15T11:40:22.121225Z"}, {"uuid": "99d10cdc-42bc-42cb-b6e0-55d1abe1daa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lyv3ijo3ga2k", "content": "", "creation_timestamp": "2025-09-15T15:07:34.819584Z"}, {"uuid": "d205b022-970d-439c-a8ea-31bd0cdee606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7ruke4o2m", "content": "", "creation_timestamp": "2025-09-16T21:02:32.947418Z"}, {"uuid": "097aa4e6-5890-4256-81f3-3d22a007c041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/flowise_cve_2025_58434", "content": "", "creation_timestamp": "2025-09-18T11:02:29.000000Z"}, {"uuid": "91d64d1d-7e97-46f5-aac1-44c010016ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/1wDj6WHUcuNjYA-jwlhpoNrQKiJqHyxAchFJ4VwFNmcREoc", "content": "", "creation_timestamp": "2026-04-12T09:00:12.000000Z"}, {"uuid": "184dd2c2-7da4-4d55-919b-6280e232cb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/S964UnaAzc4FW7CZCUbAm7wNqkztcWapRmtGqRf9U9sXCaA", "content": "", "creation_timestamp": "2026-04-12T03:00:07.000000Z"}, {"uuid": "f20950c3-d9e2-4248-ab37-de8fcb93cc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/jqsHB6FIdeMNMlYJLaE-SWbBIQ7X4SKPFQvaPULFC7d8_bM", "content": "", "creation_timestamp": "2026-04-14T15:00:07.000000Z"}, {"uuid": "86850147-7fb2-42ed-9fbc-d5d22da7c6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/UHDH5Dy8dLbKDvrSUjbHqZq8jdYbFApOrWWgQ31t4VSl0Kk", "content": "", "creation_timestamp": "2026-04-20T15:00:07.000000Z"}, {"uuid": "86cfd18c-3033-4aaf-a12d-8531d848712f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU", "content": "", "creation_timestamp": "2026-04-22T15:00:07.000000Z"}, {"uuid": "8bcdaf1f-338c-401d-968b-879b714ec72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/yMHRwucMH5NKSLqzNIM-ZYyFWHJDDL7HEU8zo-8EJPv_HgI", "content": "", "creation_timestamp": "2026-08-29T23:00:07.494867Z"}, {"uuid": "0e669417-3da7-4be1-a9b0-682c66e025bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/yMHRwucMH5NKSLqzNIM-ZYyFWHJDDL7HEU8zo-8EJPv_HgI", "content": "", "creation_timestamp": "2026-08-30T00:00:11.305288Z"}, {"uuid": "95bb18c0-7a5c-4fea-ac23-cde8dc9b056d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/cnT3gNjT1c8jZyCBUN7A77QIJYcKya_18WEnlQRaj4tp4YI", "content": "", "creation_timestamp": "2026-05-10T15:00:08.000000Z"}, {"uuid": "e024b824-bb85-4df1-b2a6-2beabb96d4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/M2s3PphtTCD9brru-X6QMyPesFMqQlhfbVnnLWpusEfiV5g", "content": "", "creation_timestamp": "2026-05-16T21:00:04.000000Z"}, {"uuid": "9ed320be-495d-495c-a53f-b03a5439c430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wgpv-6j63-x5ph", "content": "", "creation_timestamp": "2025-09-12T17:22:29.000000Z"}, {"uuid": "3c4b50cf-1435-4502-8cee-b71111ee7eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "https://t.me/GithubRedTeam/86822", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HackTheBox-Silentium\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SuriyaBoon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 11:10:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull walkthrough of HackTheBox \"Silentium\" (Medium/Linux). Chains three CVEs: CVE-2025-58434 leaks a Flowise password reset token unauthenticated, enabling account takeover; CVE-2025-59528 achieves RCE via unsanitized CustomMCP node; env vars expose SSH credentials for lateral movement. CVE-2025-8110 exploits Gogs symlink write as root to escalate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T12:08:23.000000Z"}, {"uuid": "4ba43729-41a8-473d-ab46-f7e18d131de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/vTjZhASXhwWeDqYuxnAyADQ7eMJlo90DyIvt3LBPQV5_k50", "content": "", "creation_timestamp": "2026-06-01T15:00:07.000000Z"}, {"uuid": "f5eb394a-f16a-4510-b0f3-1582d11609cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "content": "", "creation_timestamp": "2026-08-27T12:00:12.830549Z"}, {"uuid": "e35cf7b0-91bd-467f-b7c3-c60d7073ec4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-16T19:00:30.104285Z"}, {"uuid": "9fa01a4a-fde7-493e-a9c1-782ec439ca4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-17T00:00:46.792585Z"}, {"uuid": "b3ca0aec-977c-4dc4-a9c3-8e3441c76b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-18T03:00:03.740542Z"}, {"uuid": "29c6cbf0-1e6d-4c77-8c43-2541e027b8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-19T00:00:30.657157Z"}, {"uuid": "ace0951f-4939-4606-b284-938eaf10201e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "content": "", "creation_timestamp": "2026-08-28T00:00:56.728005Z"}, {"uuid": "cc98bfcd-8337-4c30-93f4-df8adddaefaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "content": "", "creation_timestamp": "2026-08-29T00:00:12.481813Z"}, {"uuid": "f57703a9-5aba-4e8f-b17b-69a6f7407136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mu3p4fsdmd2m", "content": "CVE-2025-58434 is trending. Hype score 7, currently #5 on cvemon.\n\nFlowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-58434", "creation_timestamp": "2026-08-27T20:34:55.910192Z"}, {"uuid": "97f64e70-032d-4a2f-b571-fbe1c96b36da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/yMHRwucMH5NKSLqzNIM-ZYyFWHJDDL7HEU8zo-8EJPv_HgI", "content": "", "creation_timestamp": "2026-08-31T00:00:49.073484Z"}, {"uuid": "7cadcd37-d61c-4bc1-9886-16ad23d6b713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-02T06:00:13.631148Z"}, {"uuid": "ab325637-14bc-4cce-a237-a0412ecc243e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-03T00:00:48.420384Z"}, {"uuid": "20e151d7-e325-4568-a6da-8909c33b4a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-03T08:00:04.280427Z"}, {"uuid": "a7b26437-d23b-45a3-828e-275cc658caf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58434", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-04T00:00:56.130041Z"}]}