CVE-2026-73602

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73484

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like tocsv, tojson, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesyste...

CVE-2026-73602

Flowise up to 3.1.3 contains a sandbox escape in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by bypassing moment locale validation. An attacker can craft a fake String object with a match function to bypass path traversal checks and load/execute malicious ...

CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

EUVD-2026-57806

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73484

Flowise before 3.1.3 has a sandbox-escape in pythonCodeValidator.ts that allows native Pandas DataFrame methods (to_csv, to_json, pipe, query) to bypass restrictions. This enables authenticated attackers to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem. Reported i...

EUVD-2026-57800

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like tocsv, tojson, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesyste...

EUVD-2026-57799

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

CVE-2026-73483

Summary of the vulnerability (CVE-2026-73483): Flowise (flows: flowise, flowise-components) versions

CVE-2026-73484 Flowise before 3.1.3 Sandbox Escape via Pandas Methods

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like tocsv, tojson, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesyste...

CVE-2026-19163

A flaw was found in the Media component of Google Chrome. This use-after-free vulnerability could allow a remote attacker, who has already compromised the renderer process, to potentially escape the browser's sandbox. This could be achieved by enticing a user to visit a specially crafted HTML pag...

CVE-2026-19149

A flaw was found in the Aura component of Google Chrome. A remote attacker could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass security restrictions sandbox escape and execute unauthorized code on the affected system, posing a...

CVE-2026-19165

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, by convincing a user to install a malicious extension, to execute arbitrary code within the browser's sandbox. This could lead to further compromise of the user's system...

CVE-2026-19166

A flaw was found in Web Authentication in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to escape the browser's security sandbox, leading to further system compromi...

CVE-2026-19171

A flaw was found in chromium-browser. This use-after-free vulnerability in the Media component allows a remote attacker to potentially escape the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page...

CVE-2026-19147

A flaw was found in Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a use-after-free vulnerability in the Aura component by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to perform...

ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE

ServiceNow AI Platform Brazil, Australia, Zurich, and Yokohama releases before patching contains a pre-authentication remote code execution vulnerability. The /assessmentthanks.do endpoint passes the sysparmassessabletype parameter into GlideRecord's addQuery, which evaluates "javascript:" prefix...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

CVE-2026-19560

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the Blink component by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the sandbox environment, potentially compromising the affected...

CVE-2026-19175

A flaw was found in Google Chrome's Payments component. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to escape the browser's security sandbox, gaining unauthorized access to the...