# FlowiseAI vulnerabilities & exploitation > As of 2026-11-06, Threadlinqs tracks 5 FlowiseAI CVEs, 0 in the CISA Known Exploited Vulnerabilities catalog, linked to 6 tracked threat campaigns and 2 named threat actors. **Data as of:** 2026-11-06 ## Exploitation timeline Threadlinqs has recorded 5 FlowiseAI CVEs published between 2024-04-15 and 2026-08-15. The busiest month was 2026-08 (2 new CVEs). None of them is listed in CISA KEV yet. ## Most exploited vulnerabilities Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 5 of 5 tracked FlowiseAI CVEs. - [CVE-2025-59528](https://intel.threadlinqs.com/cve/CVE-2025-59528) — CRITICAL 10 · EPSS 86.5% · 2025-09-22 - [CVE-2024-31621](https://intel.threadlinqs.com/cve/CVE-2024-31621) — HIGH 7.6 · EPSS 59.9% · 2024-04-29 - [CVE-2026-41264](https://intel.threadlinqs.com/cve/CVE-2026-41264) — CRITICAL 9.8 · EPSS 1.8% · 2026-04-23 - [CVE-2026-73487](https://intel.threadlinqs.com/cve/CVE-2026-73487) — CRITICAL 9.8 · EPSS 1% · 2026-08-13 - [CVE-2026-69255](https://intel.threadlinqs.com/cve/CVE-2026-69255) — HIGH 8.8 · EPSS 0.6% · 2026-08-04 ## Products affected Threadlinqs normalises CPE and CNA product records across all 5 CVEs; 1 distinct FlowiseAI product is affected. The most frequently affected: - Flowise — 5 CVEs ## Threat activity 6 tracked threat campaigns reference FlowiseAI products or exploit FlowiseAI CVEs: - [LLMjacking Bills Reach $1M (Mandiant/GTIG; LiteLLM CVE-2026-40217), Trezor Safe 5 Reseller Implant, SAP Flaws Weaponized Within Days](https://intel.threadlinqs.com/threat/TL-2026-5425) — HIGH — 2026-11-06 - [Metasploit 6.5.9 Wrapup: Public Exploit Modules for Citrix NetScaler (CVE-2026-88771), Cisco Secure Email Gateway (CVE-2026-76461/76443), GitLab CI/CD Regex RCE (CVE-2026-97229), OpenBullet2, Flowise, SPIP and WordPress Bug Library](https://intel.threadlinqs.com/threat/TL-2026-5423) — CRITICAL — 2026-11-06 - [Threat actor abuses Flowise GenAI orchestration platform (CVE-2025-59528, CVE-2026-41264, CVE-2024-31621 class) and weaponizes its LLM agent for offensive reconnaissance](https://intel.threadlinqs.com/threat/TL-2026-3865) — HIGH — 2026-10-19 - [Chinese-Speaking 'Kapibala' Actor (Red Heron-Linked) Chains WordPress wp2shell, Zyxel GS1900, and Ubiquiti UniFi OS Flaws to Steal Government Data](https://intel.threadlinqs.com/threat/TL-2026-2619) — CRITICAL — 2026-09-22 - [Endor Labs Discloses 14 Critical/High Vulnerabilities Across Seven AI Orchestration Platforms (NocoBase, Flowise, Langflow, Dify, Activepieces, Kestra, Apache Airflow)](https://intel.threadlinqs.com/threat/TL-2026-2438) — CRITICAL — 2026-09-10 - [Qilin-Linked Campaign Exploits MCP Gateway and LLM Framework Flaws (CVE-2026-59822, CVE-2026-42271, CVE-2026-48710) for RCE and Cryptomining](https://intel.threadlinqs.com/threat/TL-2026-2185) — CRITICAL — 2026-08-28 ## Threat actors targeting FlowiseAI Named threat actors attributed to campaigns that involve FlowiseAI products or CVEs, with the number of linked campaigns: - [Kapibala](https://intel.threadlinqs.com/actor/Kapibala) — 1 campaign - [UNC6993](https://intel.threadlinqs.com/actor/UNC6993) — 1 campaign ## How to prioritise FlowiseAI patching This order follows the data Threadlinqs holds for FlowiseAI, not a generic severity checklist: - No FlowiseAI CVE is in CISA KEV yet, so rank by exploit probability instead. - Outside KEV, the highest EPSS scores are [CVE-2025-59528](https://intel.threadlinqs.com/cve/CVE-2025-59528) (86.5%), [CVE-2024-31621](https://intel.threadlinqs.com/cve/CVE-2024-31621) (59.9%), [CVE-2026-41264](https://intel.threadlinqs.com/cve/CVE-2026-41264) (1.8%). - 3 CVEs score Critical and 2 High on CVSS v3 (maximum 10, average 9.2); sequence these after KEV and high-EPSS items. - 3 CVEs have a public exploit or proof of concept recorded, which shortens the time from disclosure to attack. ## About this data Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-11-06 and refresh daily. Canonical: https://intel.threadlinqs.com/vendors/flowiseai All vendors: https://intel.threadlinqs.com/vendors Full detection coverage and IOCs for threats exploiting FlowiseAI products unlock per threat with TL Creds (https://threadlinqs.com/tl-creds); the Threadlinqs MCP server (Purple) serves them to AI agents: https://intel.threadlinqs.com/mcp