CVE-2026-91936
Received Received - Intake

Script Injection in Flowise Docker Image Build Workflows

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: VulnCheck

Description
Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflow_dispatch inputs are directly interpolated into shell run blocks. Attackers with repository write access can inject shell metacharacters through inputs like tag_version and node_version to execute arbitrary commands and steal AWS credentials and Docker Hub tokens.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-91936
EUVD
EUVD-2026-78794

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
flowiseai flowise to 3.1.4 (exc)
flowise flowise to 3.1.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Flowise versions before 3.1.4. It allows script injection in Docker image build workflows where inputs like tag_version and node_version are directly used in shell commands. Attackers with repository write access can inject shell metacharacters to execute arbitrary commands and steal credentials such as AWS keys and Docker Hub tokens.

Detection Guidance

Check for Flowise versions before 3.1.4 by running: npm list flowise or docker inspect <container_name>. Look for workflow files in .github/workflows that use ${{ inputs.tag_version }} or ${{ inputs.node_version }} in shell blocks. Review GitHub Actions logs for unexpected command execution or credential exposure.

Impact Analysis

If you use Flowise versions before 3.1.4, an attacker with write access to your repository could execute malicious commands. This may lead to theft of sensitive credentials like AWS access keys and Docker Hub tokens, potentially compromising your cloud infrastructure and container registries.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements under GDPR and HIPAA. Exposure of credentials may result in unauthorized data access or processing, triggering regulatory penalties and legal consequences.

Mitigation Strategies

Upgrade Flowise to version 3.1.4 or later immediately. Replace direct input interpolation in workflows with environment variables. Revoke and rotate any exposed AWS credentials and Docker Hub tokens. Restrict write access to repositories hosting these workflows.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-91936. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart