Flowise Sandbox Escape via Langchain and Mammoth Modules

Executive Summary

Flowise through version 3.1.4 has a sandbox escape flaw that lets authenticated users run OS commands by exploiting allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can send JavaScript to /api/v1/node-custom-function to write a file into the mammoth package via LocalFileStore, then require it to escape vm2 as the Flowise process user.

Useful 0 Not Useful 0

Impact Analysis

An attacker with authenticated access could execute arbitrary OS commands on the server running Flowise, potentially leading to full system compromise, data theft, or further network infiltration. This could disrupt services or allow unauthorized access to sensitive data.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations may face fines, legal action, or loss of compliance certifications if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Update Flowise to a version beyond 3.1.4 to address the sandbox escape vulnerability. Disable ALLOW_BUILTIN_DEP if not required and restrict access to /api/v1/node-custom-function endpoints. Monitor for unauthorized file writes in the mammoth package directory.

Useful 0 Not Useful 0