{"schema":"threatline.record/2","record":{"id":"CVE-2026-69254","aliases":["GHSA-3769-jgqc-cxm7"],"summary":"Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override","details":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching packages/server/src/routes/node-custom-functions/index.ts could run a custom function that imported flowise-components/dist/src/utils.js, called executeJavaScriptCode() again with nodeVMOptions.require.builtin set to allow all built-in modules, and then required child_process to execute arbitrary system commands as root on the Flowise server. This issue is fixed in version 3.1.3.","categories":["Libraries & packages"],"product":"Flowise","vendor":"FlowiseAI","ecosystem":"npm","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69254","source_modified_at":"2026-08-04T17:45:10.631Z","fetched_at":"2026-10-24T00:31:04.721601Z","product":"Flowise","vendor":"FlowiseAI","versions":[{"version":"< 3.1.3","status":"affected"}],"defaultStatus":null},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3769-jgqc-cxm7","source_modified_at":"2026-08-04T15:56:02.787653Z","fetched_at":"2026-10-24T00:31:04.721601Z","package":{"name":"flowise","ecosystem":"npm","purl":"pkg:npm/flowise"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.1.3"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3769-jgqc-cxm7","source_modified_at":"2026-08-04T15:56:02.787653Z","fetched_at":"2026-10-24T00:31:04.721601Z","package":{"name":"flowise-components","ecosystem":"npm","purl":"pkg:npm/flowise-components"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.1.3"}]}],"versions":[]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3769-jgqc-cxm7","source_modified_at":"2026-08-04T15:56:02.787653Z","fetched_at":"2026-10-24T00:31:04.721601Z","package":{"name":"flowise","ecosystem":"npm","purl":"pkg:npm/flowise"},"version":"3.1.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-3769-jgqc-cxm7","source_modified_at":"2026-08-04T15:56:02.787653Z","fetched_at":"2026-10-24T00:31:04.721601Z","package":{"name":"flowise-components","ecosystem":"npm","purl":"pkg:npm/flowise-components"},"version":"3.1.3"}],"cvss":9.4,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00691,"percentile":0.52281,"score_date":"2026-10-23"},"published_at":"2026-08-04T15:28:49.651Z","modified_at":"2026-08-04T17:45:10.631Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-69254","fetched_at":"2026-10-24T00:31:04.721601Z","source_modified_at":"2026-08-04T17:45:10.631Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-3769-jgqc-cxm7","fetched_at":"2026-10-24T00:31:04.721601Z","source_modified_at":"2026-08-04T15:56:02.787653Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-69254","fetched_at":"2026-10-24T00:31:04.721601Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3769-jgqc-cxm7","tags":["exploit"]},{"source":"CVE List","url":"https://github.com/FlowiseAI/Flowise/pull/6306","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/FlowiseAI/Flowise/commit/3086cb7e323bb96c5a581d3232ef975b0d92183d","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3","tags":["x_refsource_MISC"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"total","assessed_at":"2026-08-04T17:45:01.031669Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-08-04T17:45:10.631Z","content_hash":"6eaf01cfaffee66ad4f738bcabbdcd7bbbca0c94338afa04378623f617ca58a6"}}