command-execution

• CVE-2025-71336 - Flowise Custom MCP auth bypass RCE 2026-06-26
• CVE-2026-48708 - OliveTin template race command contamination 2026-06-25