1454 matches found
CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE
Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...
CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer
Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...
CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer
Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...
CVE-2026-73602: Improper Neutralization of Directives in Dynamically Evaluated Code
Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...
CVE-2026-73483: Improper Neutralization of Special Elements used in an OS Command
Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...
PT-2026-71430
Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...
PT-2026-71423
Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description A sandbox escape exists in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the '/api/v1/node-custom-function' endpoint can escape the sandbox by providing...
Eval Injection
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Eval Injection through improper input validation in the baseURL parameter and insecure use of the vm2 sandbox. An attacker can execute arbitrary code on the server by injecting malicious JavaScript code via...
Eval Injection
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Eval Injection through improper input validation in the baseURL parameter and insecure use of the vm2 sandbox. An attacker can execute arbitrary code on the server by injecting malicious...
GHSA-WG86-R78F-74MP Flowise Sandbox Escape to RCE
============================================================================= Security Advisory elttam Topic: Flowise JavaScript Sandbox Escape Module: FlowiseAI/Flowise, FlowiseAI/nodevm Disclosed: 11-Apr-2026 Credits: Luke Jahnke and Alex Brown Affects: FlowiseAI/Flowise 3.1.1, FlowiseAI/nodevm...
PT-2026-67748
Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description An authenticated user can achieve remote code execution on the Flowise server by escaping the vm2 sandbox. The issue exists in the AgentAsTool, ChatflowTool, and ExecuteFlow custom-tool components,...
CVE-2026-69253: Improper Neutralization of Directives in Dynamically Evaluated Code
Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to version 3.1.3, several custom-tool components — AgentAsTool, ChatflowTool, and ExecuteFlow — ran code in the in-process vm2 sandbox. To build that code, they inserted a user-controlled...
Exploit for Injection in Vm2_Project Vm2
Hack The Box — Codify Writeup !Difficultyhttps://img.shiel...
PT-2026-66811
Root has patched AIKIDO-2026-10730 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
PT-2026-66822
Root has patched AIKIDO-2026-10847 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
PT-2026-66808
Root has patched AIKIDO-2026-10726 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
PT-2026-66801
Root has patched AIKIDO-2026-10718 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
PT-2026-66804
Root has patched AIKIDO-2026-10721 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...