CVE-2026-119978

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5

Description Authenticated users can execute operating system commands by escaping the custom function sandbox. This occurs when the ALLOW BUILTIN DEP variable is set to true, allowing the abuse of allowlisted langchain and mammoth modules. An attacker can submit JavaScript to the '/api/v1/node-custom-function' endpoint to write a file into the mammoth package using LocalFileStore and subsequently require it, escaping the vm2 sandbox as the Flowise process user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.