CVE-2026-58057

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3

Description An authenticated user can execute arbitrary code in the server context by configuring a Custom MCP node. The issue occurs because environment variables are validated against a denylist using a case-sensitive comparison. On Windows systems, where environment names are case-insensitive, providing a variable like node options bypasses the NODE OPTIONS denylist entry, allowing the injection of NODE OPTIONS --require.

Recommendations Update to version 3.1.3 or later.