THREAT OPS › Threat News › [GHSA] GHSA-g32j-mmxr-gfq5 (critical) — Flowise RCE via TypeORM DataSource
[GHSA] GHSA-g32j-mmxr-gfq5 (critical) — Flowise RCE via TypeORM DataSource
GHSA-g32j-mmxr-gfq5 Severity: critical CVE: CVE-2026-69251
Flowise RCE via TypeORM DataSource
============================================================================= Security Advisory elttam
Topic: Flowise RCE via TypeORM DataSource
Module: F
MITRE ATT&CK techniques
Indicators of compromise
- ddba104d8e50fbc1e72c6fe021d012be83e66d78d26816e1a6a3fddab4212effsha256
- 465005a5036d9c4e5e3a7675527fa4cf9cff7507sha1
- 5a37227d14dbe34234aa1cca97bc12092e0dbcd6sha1
- CVE-2026-69251cve
- https://typeorm.io/docs/data-source/data-sourceurl
- https://typeorm.io/docs/data-source/data-source-options/url
- admin@flowise.localemail
- hub.docker.comdomain
Original source: https://github.com/advisories/GHSA-g32j-mmxr-gfq5