CVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCE
HoneyLabs honeypots recorded 19 probes matching CVE-2026-46442 from 12 distinct source IP addresses in the last 7 days. Severity is rated critical.
Request paths that identify it
- /api/v1/node-custom-function
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 104.22.102.65 | 2 | Cloudflare, Inc. | United States |
| 172.70.50.93 | 2 | Cloudflare, Inc. | Canada |
| 34.187.169.24 | 2 | Google LLC | United States |
| 34.81.36.188 | 2 | Google LLC | Taiwan |
| 34.83.66.181 | 2 | Google LLC | United States |
| 34.89.162.226 | 2 | Google LLC | Germany |
| 34.90.174.171 | 2 | Google LLC | The Netherlands |
| 108.162.242.53 | 1 | Cloudflare, Inc. | Canada |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 10 | 5 |
| AS13335 | Cloudflare, Inc. | 9 | 7 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 6 |
| Germany | 4 |
| Canada | 3 |
| The Netherlands | 2 |
| Singapore | 2 |
| Taiwan | 2 |
Captured requests
- /api/v1/node-custom-function
- /flowise/api/v1/node-custom-function
HTTP client fingerprints
- b11cuq147_80050813_591d5a70_x379753ab95539f8fdafedf99e1a2
- b11cuq061_00050812_0421ce22_xe1a2
CVE report
CVE report
Open a specific CVE from the CVE tracker.