{"id":"EUVD-2026-57799","enisaUuid":"adf15b33-981c-363f-9131-f90c5052213a","description":"Flowise (packages flowise and flowise-components) in versions \u003c\u003d 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and args parameters to puppeteer.launch(), which internally invokes child_process.spawn() outside the sandbox boundary. This allows execution of arbitrary OS commands as the Flowise process user (root in the official Docker image) and arbitrary host file disclosure via Chromium\u0027s file:// URL handling. In versions 3.0.8–3.1.2 exploitation requires ALLOW_BUILTIN_DEP\u003dtrue; earlier versions are exploitable by default. Fixed in 3.1.3.","datePublished":"Aug 13, 2026, 11:28:04 AM","dateUpdated":"Aug 14, 2026, 10:25:36 PM","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9gvv-qjj3-2p6g\nhttps://www.vulncheck.com/advisories/flowise-before-sandbox-escape-via-puppeteer\n","aliases":"CVE-2026-73483\nGHSA-6j9g-8fxc-25hq\nGHSA-9gvv-qjj3-2p6g\n","assigner":"VulnCheck","epss":0.62,"enisaIdProduct":[{"id":"a3066667-dcff-36c2-9ab6-4fd80ad27899","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.1.3"}],"enisaIdVendor":[{"id":"d09b8808-5e48-3355-b500-2bde3611283d","vendor":{"name":"FlowiseAI"}}],"enisaIdVulnerability":[{"id":"17336631-be6a-3e58-b1fd-89a6078aef3d","vulnerability":{"id":"CVE-2026-73483","description":"Flowise (packages flowise and flowise-components) in versions \u003c\u003d 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and args parameters to puppeteer.launch(), which internally invokes child_process.spawn() outside the sandbox boundary. This allows execution of arbitrary OS commands as the Flowise process user (root in the official Docker image) and arbitrary host file disclosure via Chromium\u0027s file:// URL handling. In versions 3.0.8–3.1.2 exploitation requires ALLOW_BUILTIN_DEP\u003dtrue; earlier versions are exploitable by default. Fixed in 3.1.3.","datePublished":"Aug 13, 2026, 11:28:04 AM","dateUpdated":"Aug 14, 2026, 10:25:36 PM","status":"PUBLISHED","baseScore":9.4,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9gvv-qjj3-2p6g\nhttps://www.vulncheck.com/advisories/flowise-before-sandbox-escape-via-puppeteer\n","enisa_id":"EUVD-2026-57799\n","assigner":"VulnCheck","epss":0.62,"dataProcessed":"Nov 5, 2026, 7:14:48 AM","vulnerabilityProduct":[{"id":"c7a6b205-d727-36f1-b099-a7a565cc4368","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.1.3"}],"vulnerabilityVendor":[{"id":"386b4ce9-e279-3e9b-b505-f2deade67812","vendor":{"name":"FlowiseAI"}}]}},{"id":"9d41fec6-ed5d-3a6d-953d-2ae264fcfdcf","vulnerability":{"id":"GHSA-9gvv-qjj3-2p6g","description":"Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium","datePublished":"Oct 7, 2026, 4:17:02 PM","dateUpdated":"Oct 7, 2026, 4:17:02 PM","baseScore":0.0,"references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9gvv-qjj3-2p6g\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-73483\nhttps://github.com/FlowiseAI/Flowise\nhttps://www.vulncheck.com/advisories/flowise-before-sandbox-escape-via-puppeteer\n","enisa_id":"EUVD-2026-57799\n","aliases":"CVE-2026-73483\nGHSA-9gvv-qjj3-2p6g\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"e9c8fde0-edd7-3e3c-91c6-f0c34907e1e4","vulnerability":{"id":"GHSA-6j9g-8fxc-25hq","description":"Duplicate Advisory: Flowise contains an unauthenticated sandbox escape","datePublished":"Aug 13, 2026, 12:31:09 PM","dateUpdated":"Oct 7, 2026, 4:16:47 PM","baseScore":0.0,"references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9gvv-qjj3-2p6g\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-73483\nhttps://www.vulncheck.com/advisories/flowise-before-sandbox-escape-via-puppeteer\n","enisa_id":"EUVD-2026-57799\n","aliases":"GHSA-6j9g-8fxc-25hq\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}