What’s Vulnerable › Vulnerabilities

CVE-2025-57164

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-10-17 · updated 2026-06-17
• Weakness: CWE-77

Description

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.

Affected products

• FlowiseAI Flowise: 3.0.5

References

• https://github.com/FlowiseAI/Flowise
• https://github.com/FlowiseAI/Flowise/blob/main/packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7944-7c6r-55vv

Get alerted when CVE-2025-57164 or the next vulnerability affects your stack