CVE-2025-57164: Flowiseai Flowise

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.

Affected products

• Flowiseai Flowise: version 3.0.5 only

Published 2025-10-17. Last modified 2026-06-17.