Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for building custom LLM apps and agentic systems to execute arbitrary code. [...]
Max severity Flowise RCE vulnerability now exploited in attacks
Summary + source link. No paywalls, no tracking.