Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
Flowise
More for Flowise RSS feed for Flowise
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-69254
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 4, 2026
- Source last modified
- October 23, 2026
Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching packages/server/src/routes/node-custom-functions/index.ts could run a custom function that imported flowise-components/dist/src/utils.js, called executeJavaScriptCode() again with nodeVMOptions.require.builtin set to allow all built-in modules, and then required child_process to execute arbitrary system commands as root on the Flowise server. This issue is fixed in version 3.1.3.
Description quoted from the NVD record.
Who is affected
Flowise, a drag-and-drop tool for building apps that use AI language models, has a flaw in all versions before 3.1.3. The problem is in the feature that lets users run their own custom functions inside the product. Someone who already has a login to Flowise could use that feature to get around its safety limits and run any commands they choose on the computer that hosts Flowise, with full administrator (root) control. This flaw is rated High.
What to do
- If someone in your organization installed and runs Flowise, that person should update it to version
3.1.3or later, which fixes this flaw. - If an IT provider or vendor runs Flowise for your organization, send them this advisory and ask when the update to version
3.1.3will be done. - If you are not sure whether your organization uses Flowise, ask the person who looks after your computers or your IT provider to check.
- After the update, have the person who made it check that Flowise is now running version
3.1.3or later.
Analysis written from the source record as of October 23, 2026 and reviewed before publishing.