Metasploit adds auxiliary module for Flowise auth bypass CVE-2025-58434
What's new
First merged summary.
Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI
A Metasploit commit adds an auxiliary module for Flowise authentication bypass CVE-2025-58434, with no versions, fix, or exploitation status.
A Metasploit Framework commit landed module #21757, adding an auxiliary module for a Flowise authentication bypass tracked as CVE-2025-58434. The change is described as an enhancement. The commit message does not give affected versions, a fixed release, or whether the flaw is being exploited.
Key facts
- Module #21757 targets Flowise authentication bypass CVE-2025-58434.
- The commit describes the change as an enhancement adding an auxiliary module.
- No version range or remediation is included in the commit text.
- The commit does not say whether the flaw is exploited.
Timeline
dated events in the reporting · oldest first- Oct 28, 2026Metasploit lands auxiliary module #21757 for CVE-2025-58434. · Metasploit Framework commits
What each outlet adds
beyond the shared facts- Metasploit Framework commitsNames module #21757 and CVE-2025-58434; no versions or fix.
- CVEs
- CVE-2025-58434
- Vendors
- Portainer
- Products
- FlowiseMetasploit Framework
- Organizations
- Rapid7
Coverage
oldest first · one row per article · UTC- · 2d ago
Metasploit Framework commitsFirst report
Metasploit lands Flowise authentication-bypass module (CVE-2025-58434)
The auxiliary module targets CVE-2025-58434; the commit gives no affected versions, fix, or exploitation status.
- · 16h ago
Metasploit adds authenticated Portainer Docker API root RCE
The new module targets an authenticated Docker API path; the commit names no CVE or affected versions.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-58434 | Unauthenticated Account Takeover via Password Reset Token Leak in Flowise | 9.8 | 76% | PoC ×3 |