CVE-2026-40933 — Flowise: Authenticated RCE via MCP stdio Adapter
Overview CVE-2026-40933 is a critical command injection vulnerability in Flowise, the drag-and-drop UI platform for building customized LLM flows. The vulnerability exists in the Model Context Protocol (MCP) adapter's unsafe…
