Skaushik-Qlys

**Name of the Vulnerable Software and Affected Versions** Flowise versions prior to 3.1.3 **Description** A sandbox escape exists in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the '/api/v1/node-custom-function' endpoint can escape the sandbox by providing attacker-controlled `executablePath` and `args` parameters to the `puppeteer.launch()` function, which internally invokes `child process.spawn()` outside the sandbox boundary. This allows the execution of arbitrary OS commands as the Flowise process user and arbitrary host file disclosure via Chromium's file:// URL handling. For versions 3.0.8 through 3.1.2, exploitation requires the `ALLOW BUILTIN DEP` variable to be set to true, while earlier versions are exploitable by default. **Recommendations** Update to version 3.1.3. Restrict access to the '/api/v1/node-custom-function' endpoint to minimize the risk of exploitation.