{"vulnerability": "cve-2026-46442", "sightings": [{"uuid": "fcba2e12-316f-4a43-b5ec-a0fd4e2125c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46442", "type": "published-proof-of-concept", "source": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9rvc-vf7m-pgm2", "content": "", "creation_timestamp": "2026-05-14T14:13:39.000000Z"}, {"uuid": "13011486-44ae-4098-a34c-f38106be953f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns54nhn6s2o", "content": "CVE-2026-46442 - Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape\nCVE ID : CVE-2026-46442\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : Flowise is a drag & drop user interface to build a customized l...", "creation_timestamp": "2026-06-08T16:47:48.390211Z"}, {"uuid": "5f5d71de-6dfa-4301-a725-55515abc73bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnjfbops2n", "content": "\ud83d\udea8  ALERT: CVE-2026-46442\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nFlowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary Java", "creation_timestamp": "2026-06-22T00:39:12.174512Z"}, {"uuid": "497e58d2-6fbc-44a4-ac2e-80c4eddb61f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mpjfrha3zr2c", "content": "A critical-severity fix just shipped for Flowiseai Flowise. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-46442", "creation_timestamp": "2026-06-30T16:19:02.321176Z"}, {"uuid": "f8c4bb71-0989-4e45-b7b8-58ff95546455", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91a28016-23d4-45f5-b951-0a883f6f08ac", "content": "", "creation_timestamp": "2026-07-17T08:00:38.909235Z"}, {"uuid": "d8821b57-3b2d-4f23-b6d8-bb24faabaed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93892", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46442-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chinaxploiter\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 20:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcademic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T22:00:05.191203Z"}, {"uuid": "9a1b6198-d420-4fa5-a0d9-fb7b37f51e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "seen", "source": "https://t.me/GithubRedTeam/93900", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46442-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 20:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcademic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T23:00:03.017937Z"}, {"uuid": "5e2ac13d-888b-491f-b13b-282f1018295a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93900", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46442-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 20:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcademic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T00:00:08.845729Z"}, {"uuid": "15daa785-65a2-4fc5-8f99-b2b0b0bdb641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93892", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46442-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chinaxploiter\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 20:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcademic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T00:00:10.908206Z"}, {"uuid": "9654c938-9469-43c3-b06e-d304462df072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "seen", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "content": "", "creation_timestamp": "2026-07-20T18:00:06.094177Z"}, {"uuid": "73156aa1-7757-435a-812a-3754c5ca22cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "seen", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "content": "", "creation_timestamp": "2026-07-21T00:00:33.612922Z"}, {"uuid": "79dfbd62-c22e-4657-94fe-dfdf15d86837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46442.yaml", "content": "", "creation_timestamp": "2026-07-21T06:00:06.661145Z"}, {"uuid": "a4a60b38-f8e3-45e6-8cf7-c96d9ee10b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "published-proof-of-concept", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "content": "", "creation_timestamp": "2026-07-22T00:00:07.304209Z"}, {"uuid": "d69e4aa5-cc34-494e-9d97-190986f0efb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46442.yaml", "content": "", "creation_timestamp": "2026-07-22T00:00:06.444197Z"}, {"uuid": "17714fe6-755b-41e7-a4d3-647089c105e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46442.yaml", "content": "", "creation_timestamp": "2026-07-23T00:00:07.415856Z"}, {"uuid": "aabb562f-0304-45a5-bacc-4a1fda348ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46442", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46442.yaml", "content": "", "creation_timestamp": "2026-07-24T00:00:22.010435Z"}]}