{"id":"CVE-2026-69263","title":"Flowise is a drag & drop user interface to build a customized large language model flow","summary":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-184"],"vendor":"flowiseai","product":"flowise","affected":["flowise < 3.1.3"],"patched":["flowise 3.1.3"],"published":"2026-08-04","updated":"2026-09-14","sourceUpdated":"2026-09-14T19:24:10.777","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69263","references":[{"url":"https://github.com/FlowiseAI/Flowise/commit/a4c4e4988cded15edf725e762560575b889ae351","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/pull/6471","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc48-889x-5qmw","label":"security-advisories@github.com"},{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc48-889x-5qmw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://github.com/advisories/GHSA-xc48-889x-5qmw"}],"tags":["nvd","exploit-available","ghsa","npm"],"epss":0.00475,"epssPercentile":0.40077,"exploits":{"github":1,"githubRepos":["https://github.com/leoelsolh/CVE-2026-69263"],"checkedAt":"2026-09-21T15:30:16.661Z"},"exploitAvailable":true,"aliases":["GHSA-xc48-889x-5qmw"],"ecosystem":"npm","ingestedAt":"2026-08-04T17:40:54.205Z","slug":"CVE-2026-69263","body":"## Overview\n\nFlowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, and NODE_OPTIONS by exact environment-variable name. Because npm reads configuration from npm_config_* variables, setting npm_config_yes=true reproduced --yes behavior without using a blocked flag, causing npx to auto-install and execute the named package when a Custom MCP server launched. This issue is fixed in version 3.1.3.\n\n## Affected\n\n- `flowise < 3.1.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `flowise 3.1.3`\n\n## Package advisory (CVE-2026-69263)\n\nAffected packages:\n\n- `flowise <= 3.1.2`\n- `flowise-components <= 3.1.2`\n\nPatched in:\n\n- `flowise 3.1.3`\n- `flowise-components 3.1.3`\n\nSource: https://github.com/advisories/GHSA-xc48-889x-5qmw","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":203217,"id":"CVE-2026-69263","ts":1789416895725,"field":"cvss","old":null,"new":"9.8"},{"seq":203216,"id":"CVE-2026-69263","ts":1789416895725,"field":"severity","old":"high","new":"critical"},{"seq":5449,"id":"CVE-2026-69263","ts":1788887282806,"field":"exploit_available","old":"false","new":"true"},{"seq":4332,"id":"CVE-2026-69263","ts":1788886396516,"field":"exploit_available","old":"true","new":"false"},{"seq":3061,"id":"CVE-2026-69263","ts":1788883060211,"field":"exploit_available","old":"false","new":"true"},{"seq":2090,"id":"CVE-2026-69263","ts":1788882464995,"field":"exploit_available","old":"true","new":"false"},{"seq":1156,"id":"CVE-2026-69263","ts":1788881901898,"field":"exploit_available","old":"false","new":"true"}]}