Tag
#code injection
Flowise RCE Exploited by the Greeter Framework (CVE-2024-58351)
Flowise before 2.1.4 lets overrideConfig replace the JavaScript of a Custom JS Function node; the Greeter framework exploited it, and 2.1.4 fixes it.
Nov 08, 2026