MCPA-2026-0006
highrce-vectors
Flowise MCP environment-variable blocklist bypass via npm_config_yes (unauthenticated RCE, CVE-2026-69263)
Flowise <= 3.1.2 shipped a mitigation for CVE-2025-8943 that blocks the -y/--yes flags on npx-launched MCP servers, but its environment-variable check denies only four names by exact match. npm reads configuration from npm_config_* environment variables, so setting npm_config_yes=true reproduces --yes: npx auto-installs and executes an attacker-named package, fully bypassing the mitigation even with the MCP security check enabled. Fixed in flowise / flowise-components 3.1.3.
Affected packages
| Ecosystem | Package | Affected versions |
|---|---|---|
| npm | flowise | >= 0, < 3.1.3 |
| npm | flowise-components | >= 0, < 3.1.3 |
Identifiers
CVE-2026-69263GHSA-xc48-889x-5qmwCWE-184
References
- advisory https://github.com/advisories/GHSA-xc48-889x-5qmw
- advisory https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc48-889x-5qmw
- fix https://github.com/FlowiseAI/Flowise/pull/6471
Timeline
- Published: 2026-08-04