FlowisePublished 30 Oct 2026NVD status: Deferred

CVE-2026-119978

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true.

ComponentFlowise
Severityhigh (CVSS 8.5)
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published (NVD)2026-10-30
Affected versions
<= 3.1.4
from the CVE Program record written by the CNA that assigned the CVE
Fixed insee the vendor advisory
WeaknessCWE-749
CISA KEVnot listed

Versions, checked against NVD

NVD's record (status: Deferred) lists no affected versions of Flowise for this CVE. The ranges above come from the CVE record written by VulnCheck, the CNA that assigned the CVE.

NVD description

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth package via LocalFileStore and requires it, escaping vm2 as the Flowise process user.

What to do

  • No fixed release is known yet: follow the vendor advisory below and keep Flowise off the public internet until a fix ships.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources