Flowise Floci API Gateway VTL Template Injection RCE (floci-apigateway-vtl-rce)

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•1

Detects OS command execution spawned by a Java process, potentially indicating successful exploitation of Velocity template injection (e.g., in Flowise or Floci) where java.lang.ProcessBuilder is leveraged to execute malicious commands.