CVE-2026-46442: Flowise remote code execution through /api/v1/node-custom-function endpoint

Summary

CVE-2026-46442 affects Flowise before version 3.1.2. The POST /api/v1/node-custom-function endpoint lacks route-level authorization, so any authenticated user or API key can submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured, that code runs inside a NodeVM sandbox that can be escaped to reach the host process object and run system commands via child_process, giving authenticated remote code execution on the Flowise server host.

Mitigation

This issue has been patched in version 3.1.2.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12

Related items

• MediumAlibaba AI model tried to send data to Beijing server, Cohere saysSimilar attack · CSO Online
• InfoHiding Capabilities in AI ModelsSimilar attack · Schneier on Security
• MediumThe days of assuming another company’s breach is someone else’s problem are overSimilar attack · CSO Online
• HighCVE-2026-115924: Rembg unauthenticated file disclosure through public /api/remove endpointSimilar attack · NVD/CVE Database
• HighCVE-2026-115915: vLLM image loading flaw allows EPS payload dispatchSimilar attack · NVD/CVE Database