Threat actors have started exploiting CVE-2025-59528, a critical Flowise vulnerability leading to remote code execution.