CVE-2026-69254
Received Received - Intake

Remote Code Execution in Flowise AI

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching packages/server/src/routes/node-custom-functions/index.ts could run a custom function that imported flowise-components/dist/src/utils.js, called executeJavaScriptCode() again with nodeVMOptions.require.builtin set to allow all built-in modules, and then required child_process to execute arbitrary system commands as root on the Flowise server. This issue is fixed in version 3.1.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-69254
EUVD
EUVD-2026-52742

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
flowise flowise to 3.1.3 (inc)
flowiseai flowise to 3.1.3 (exc)
flowiseai flowise 3.1.3
flowiseai flowise *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a critical remote code execution (RCE) vulnerability in Flowise software versions 3.0.5 through 3.1.1. The flaw is in the executeJavaScriptCode() function which allows authenticated users with an API key to bypass sandbox restrictions and execute arbitrary system commands as root on the server. Attackers can override security settings to re-enable restricted Node.js modules like child_process and fs, leading to full system compromise.

Detection Guidance

Check Flowise version with: npm list -g flowise or flowise --version. If version is between 3.0.5 and 3.1.1, the system is vulnerable. Inspect server logs for unusual API calls to node-custom-functions endpoints or unexpected child_process module usage.

Impact Analysis

An attacker could read sensitive files including encryption keys and credentials, modify data, or establish persistent access to the Flowise server. Since commands execute as root, the entire server could be compromised, leading to data breaches or system takeover.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and security controls in GDPR and HIPAA. It enables unauthorized access to sensitive data and system compromise, which are direct violations of these regulations' security and privacy mandates.

Mitigation Strategies

Upgrade Flowise to version 3.1.3 or later immediately. If upgrading is not possible, restrict API key access and disable custom function execution in the configuration. Monitor for any signs of compromise such as unauthorized system commands.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69254. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart