Flowise AI instances face active exploitation of critical remote code execution vulnerability

Threat actors are actively exploiting a critical Flowise AI vulnerability, CVE-2025-59528, allowing remote code execution and full system compromise. This maximum-severity flaw, with a CVSS score of 10.0, affects over 12,000 exposed Flowise instances and has been exploited for more than six months. The vulnerability enables attackers to execute arbitrary JavaScript code, access sensitive data, and compromise systems, posing a significant risk to businesses.