CVE-2026-69251
Received Received - Intake

TypeORM DataSource Code Execution in Flowise

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in packages/components/nodes/recordmanager/MySQLRecordManager/MySQLrecordManager.ts, packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts, packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts, packages/components/nodes/memory/AgentMemory/MySQLAgentMemory/MySQLAgentMemory.ts, and packages/components/nodes/memory/AgentMemory/AgentMemory.ts. TypeORM DataSource options such as entities, subscribers, and migrations can load local JavaScript files, allowing an authenticated user to execute arbitrary code on the server by uploading a JavaScript payload and referencing it from additionalConfig.entities. This issue is fixed in version 3.1.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-69251
EUVD
EUVD-2026-52701

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
flowiseai flowise to 3.1.3 (exc)
flowiseai flowise 3.1.3
flowiseai flowise-components to 3.1.3 (exc)
flowiseai flowise-components 3.1.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a critical Remote Code Execution (RCE) vulnerability in Flowise versions 3.1.2 and earlier. It allows authenticated users to inject arbitrary JavaScript code via the additionalConfig parameter in certain nodes. Attackers can upload a malicious JavaScript file and reference it in additionalConfig.entities, which executes when an Upsert operation is performed, leading to full server compromise with root privileges.

Detection Guidance

Check Flowise version with npm list -g flowise or docker inspect <container> | grep flowise. Inspect nodes using MySQLRecordManager, PostgresRecordManager, SQLiteRecordManager, or AgentMemory for suspicious additionalConfig.entities entries referencing local JavaScript files.

Impact Analysis

An attacker with authenticated access could execute arbitrary code on the server, potentially gaining full control over the system. This could lead to data theft, system damage, or further network compromise. The vulnerability requires low attack complexity and is exploitable with minimal privileges.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating confidentiality and integrity requirements of GDPR and HIPAA. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to potential exposure of sensitive data.

Mitigation Strategies

Upgrade Flowise to version 3.1.3 or later. Restrict user permissions to prevent modification of TypeORM DataSource options like entities, subscribers, and migrations. Review and remove any untrusted additionalConfig settings in affected nodes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69251. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart