Metasploit adds unauthenticated RCE modules for perimeter devices
New modules cover Flowise, SPIP, OpenBullet2, GitLab, Portainer, and a NetScaler bug the vendor said was exploited.
5
Stories per day · 30 days
2 RSS
Relatedhoneypot2metasploit2prompt-injection2ai-agent1ai-agents1authentication-bypass1chatgpt1credential-theft1exploit-module1gitlab1hack-the-box1igaming1llm-agents1netscaler1openbullet21owasp1rce1
9 stories, newest first · one card per story
Stories tagged #flowise
OWASP: ChatGPT guided a low-skill tester to an admin takeover
On Hack The Box machine Silentium, ChatGPT steered nmap and curl use against a vulnerable Flowise site; autonomous agents did not finish the takeover.
Metasploit lands Flowise authentication-bypass module (CVE-2025-58434)
The auxiliary module targets CVE-2025-58434; the commit gives no affected versions, fix, or exploitation status.
Hacker attempts prompt injection on Flowise AI agent
Exposed Flowise honeypot shows attacker using AI agent for reconnaissance against other servers via prompt injection.
Attacker probes Flowise honeypot for credentials and workflow hijacking
Sekoia’s emulated Flowise 2.2.8 captured credential queries and prompt injection, without proof of production theft.
2
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
Researchers counted 36,769 publicly reachable self-hosted AI endpoints, only about 2% behind HTTP authentication, exposing Ollama, vLLM, and Flowise to abuse.
10
ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability
ZDI disclosed a CVSS 9.8 unauthenticated prompt injection vulnerability in Flowise's CSV agent that allows remote arbitrary code execution.
ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability
ZDI discloses CVE-2026-69256, a CVSS 8.8 code injection in Flowise CSV_Agent customReadCSV allowing authenticated remote attackers to execute arbitrary code.
ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability
ZDI discloses an unauthenticated code injection remote code execution flaw in Flowise's Airtable_Agent (CVE-2026-69264, CVSS 9.8).