---
title: "Security digest: September 15, 2025"
url: https://erroneo.us/security/2025-09-15/
description: "September 15, 2025 vulnerability digest: 1 brief (Shai-Hulud); 8 critical advisories (Go, npm, PyPI). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-09-15
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: September 15, 2025

1 editorial brief and 8 critical advisories.

## Take stock

- Check exposure: Shai-Hulud . Anyone whose developer machines or CI installed an affected package version between Sep 14 and Sep 16, 2025, and any org with a shai-hulud branch, shai-hulud-workflow.yml file or public Shai-Hulud repository.
- npm: 4 critical advisories ( flowise ). Check with npm audit (or: npm ls <package>) .
- Go: 3 critical advisories ( github.com/chaos-mesh/chaos-mesh ). Check with govulncheck ./... .
- PyPI: 1 critical advisory ( mcp-kubernetes-server ). Check with pip-audit (or: pip show <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Shai-Hulud: Self-Replicating Worm Hits 500+ npm Packages](https://erroneo.us/security/briefs/shai-hulud-self-replicating-npm-worm/index.md): The worm's packages were removed in September 2025, but every machine that installed one handed over its npm, GitHub and cloud credentials, so the open question is whether you rotated them and removed the backdoor workflow.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2025-59360](https://erroneo.us/security/cve/CVE-2025-59360/index.md) Chaos Controller Manager is vulnerable to OS command injection — Go github.com/chaos-mesh/chaos-mesh < 2.7.3 → 2.7.3
- [GHSA-q67q-549q-p849](https://erroneo.us/security/ghsa/GHSA-q67q-549q-p849/index.md) Flowise has arbitrary file access due to missing chat flow id validation — npm flowise >= 2.2.8, < 3.0.6 → 3.0.6
- [GHSA-99pg-hqvx-r4gf](https://erroneo.us/security/ghsa/GHSA-99pg-hqvx-r4gf/index.md) Flowise has an Arbitrary File Read — npm flowise = 3.0.5 → 3.0.6
- [CVE-2025-57164](https://erroneo.us/security/cve/CVE-2025-57164/index.md) FlowiseAI Pre-Auth Arbitrary Code Execution — npm flowise = 3.0.5 → 3.0.6
- [CVE-2025-59377](https://erroneo.us/security/cve/CVE-2025-59377/index.md) mcp-kubernetes-server has an OS Command Injection vulnerability — PyPI mcp-kubernetes-server <= 0.1.11 → no fix
- [CVE-2025-59528](https://erroneo.us/security/cve/CVE-2025-59528/index.md) Flowise has Remote Code Execution vulnerability — npm flowise = 3.0.5 → 3.0.6
- [CVE-2025-59359](https://erroneo.us/security/cve/CVE-2025-59359/index.md) Chaos Controller Manager is vulnerable to OS command injection — Go github.com/chaos-mesh/chaos-mesh < 2.7.3 → 2.7.3
- [CVE-2025-59361](https://erroneo.us/security/cve/CVE-2025-59361/index.md) Chaos Controller Manager is vulnerable to OS command injection — Go github.com/chaos-mesh/chaos-mesh < 2.7.3 → 2.7.3

---
Source page: https://erroneo.us/security/2025-09-15/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt