Flowise MCP node_options Case-Bypass - node.exe Spawned with --require

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects the execution of Node.js processes initiated by or related to the Flowise low-code AI platform, specifically where the --require flag is used. This pattern may indicate the loading of arbitrary JavaScript code or modules into the Node.js runtime, which could be indicative of malicious code injection or exploit activity within the Flowise environment.