SZB-5402f45449
Flowise sandbox escape listed as EUVD-2026-114243 allows OS command execution
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- FlowiseAI
- Product
- Flowise
- First seen
Summary
The EUVD listing (CVSS v3.1 score 9.0) describes a sandbox escape in Flowise through version 3.1.4 that lets authenticated users execute OS commands when ALLOW_BUILTIN_DEP=true. The listing does not name a CVE ID and the item does not indicate that a fix is available.
If you use FlowiseAI
Set ALLOW_BUILTIN_DEP to false or remove it from your configuration
Update Flowise to a version later than 3.1.4 once a fix is released
Restrict who holds authenticated Flowise accounts and review recent node submissions
What the sources say 1
· Mastodon: “Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true.” Source