CVE-2026-69259
Received Received - Intake

Path Traversal in Flowise SQLite Record Manager

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended database setting, allowing additionalConfig.database to overwrite the SQLite database path. An authenticated attacker using the published Docker image, which ran as root, could write a SQLite database to paths such as /etc/chromium/exploit.conf; by controlling the table name and namespace value, the attacker could place shell syntax into the database file and trigger execution when Puppeteer launched Chromium and sourced /etc/chromium/*.conf. This issue is fixed in version 3.1.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-69259
EUVD
EUVD-2026-52765

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
flowise flowise 3.1.3
flowiseai flowise 3.1.3
flowiseai flowise-components 3.1.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-69259 is a critical Remote Code Execution (RCE) vulnerability in Flowise, an open-source low-code platform for building AI applications. The flaw exists in versions 3.1.2 and earlier. It stems from improper handling of the additionalConfig input in the SQLite Record Manager node, allowing an attacker to override the intended SQLite database path. This enables writing an SQLite database to arbitrary file paths, including system directories like /etc/chromium/. The vulnerability has a CVSS v4 base score of 9.4 (Critical).

Detection Guidance

Check Flowise version with npm list flowise or docker inspect <container>. If running version 3.1.2 or earlier, the system is vulnerable. Inspect Docker container processes for root user execution. Review logs for Upsert Vector Store operations with unusual table names or namespace values.

Impact Analysis

An authenticated user on a vulnerable Flowise instance using the Docker image could perform an Upsert Vector Store operation with a specially crafted Chatflow configuration. This creates a malicious SQLite database at an attacker-specified path. When Puppeteer launches Chromium, it sources configuration files from /etc/chromium/*.conf, triggering execution of the embedded payload. Since the Docker image runs as root, this leads to full system compromise.

Compliance Impact

This vulnerability could lead to unauthorized code execution, data breaches, and loss of sensitive information. For GDPR, it risks violating principles of data protection and user rights. For HIPAA, it may compromise protected health information confidentiality and integrity. Organizations using vulnerable versions may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade Flowise to version 3.1.3 or later. If using Docker, run the container as a non-root user. Validate and sanitize all additionalConfig inputs in SQLite Record Manager nodes. Restrict write permissions to system directories like /etc/chromium.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69259. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart