Duplicate Advisory: FlowiseAI Pre-Auth Arbitrary Code Execution

GHSA-3g4j-r53p-22wx

Published Oct 17, 2025 · Modified Oct 17, 2025

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-7944-7c6r-55vv. This link is maintained to preserve external references.

Original Description

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.

References

WEB https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7944-7c6r-55vv
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-57164
WEB https://github.com/FlowiseAI/Flowise
WEB https://github.com/FlowiseAI/Flowise/blob/main/packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes