Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

Flowise 3.1.4 lets signed‑in users run system commands

CVE-2026-119978 · published 3 days ago
Summary

The Flowise application version up to 3.1.4 can be tricked by a logged‑in user into running operating‑system commands. By sending specially crafted JavaScript to a custom function endpoint, the attacker can write and load a file that breaks out of the built‑in sandbox and runs code as the Flowise service user. Apply the latest security update or disable the custom function feature until the patch is installed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
flowiseai flowise <= 3.1.4
Original advisory text
Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore
Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth package via LocalFileStore and requires it, escaping vm2 as the Flowise process user.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-749Exposed Dangerous Method or Function
Timeline
Published30 Oct 2026
Updated2 Nov 2026
First seen30 Oct 2026
Sources
CVE-2026-119978 · NVD
CVE-2026-119978 · MITRE
Track software like this
Free during beta