{"data":{"id":"f56747d0-7df8-4ff8-ba83-0d98d5fd9949","title":"GHSA-wg86-r78f-74mp: Flowise Sandbox Escape to RCE","summary":"The Flowise platform's custom JavaScript sandbox, which uses the vm2 package by default, can be escaped to reach remote code execution in FlowiseAI/Flowise 3.1.1 and FlowiseAI/nodevm 3.9.25. Flowise permits custom code to import the moment, axios and node-fetch modules, and the moment dependency carries a previously reported path traversal flaw (CVE-2022-24785) that can lead to RCE when user input reaches the locale function. The advisory states that the issue still affects commit dddfb3c90eec900d747790a439bd362a764039cd and that patching vm2 alone would not resolve it.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-wg86-r78f-74mp","publishedAt":"2026-08-04T15:13:33.000Z","cveId":"CVE-2026-69253","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flowise-components@<= 3.1.2 (fixed: 3.1.3)","flowise@<= 3.1.2 (fixed: 3.1.3)"],"affectedPackageNames":["flowise-components","flowise"],"affectedPackageRefs":["npm:flowise","npm:flowise-components"],"affectedVendors":[],"affectedVendorsRaw":["Flowise","moment","vm2"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00664,"epssCheckedAt":"2026-11-04T00:12:27.710Z","kevDateAdded":null,"advisoryAliases":["GHSA-wg86-r78f-74mp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-08-04T15:13:33.000Z","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-40,"fixCheckedAt":"2026-10-29T21:32:23.722Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:41:14.612Z","daysToFix":-40,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:23.573Z"},{"ecosystem":"npm","name":"flowise-components","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-40,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:23.573Z"}]}}