CVE-2026-119978 Details
Description
Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth package via LocalFileStore and requires it, escaping vm2 as the Flowise process user.
A sandbox escape vulnerability has been identified in Flowise versions through 3.1.4. This vulnerability allows authenticated users to execute operating system commands by exploiting allowlisted langchain and mammoth modules, particularly when the ALLOW_BUILTIN_DEP environment variable is set to true. The issue arises within the 'vm2/@flowiseai/nodevm' JavaScript sandbox, where attackers can submit JavaScript to the '/api/v1/node-custom-function' endpoint. This JavaScript can manipulate the LocalFileStore to write a file into the mammoth package, effectively escaping the sandbox and executing commands as the Flowise process user.
Users can update to Flowise version 3.1.3 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 30, 2026CISA-ADP
Assessed Nov 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-749 | Exposed Dangerous Method or Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Flowise | <= 3.1.4 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 6, 2026 | CVE Modified | CISA-ADP |
| Nov 2, 2026 | CVE Modified | [email protected] |
| Oct 30, 2026 | New CVE Received | [email protected] |