Evidence · DiggingBeagle record
Era Security: You Had Me at Hello
Researcher-controlled Flowise honeypot observations and internet exposure estimates for transient overrideConfig JavaScript.
- Source role
- primary disclosure
Evidence record
Researcher-controlled Flowise honeypot observations and internet exposure estimates for transient overrideConfig JavaScript.
Claim-level citations (2)
- supportsGreeter hid Flowise host probes behind thousands of hello messages: Era Security recorded 4,972 chat messages containing hello while an attack framework supplied execution-bearing overrides and collected host or credential metadata.
Opening investigation; Greeter attack flow and stored user messages
- supportsGreeter hid Flowise host probes behind thousands of hello messages: In a census of version-identifiable Flowise services, the investigators found 703 unauthenticated instances and 46 meeting the reported conditions for this older overrideConfig flaw.
Internet exposure: versions, authentication and potentially affected hosts