CVE-2026-73483

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3

Description A sandbox escape exists in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the '/api/v1/node-custom-function' endpoint can escape the sandbox by providing attacker-controlled executablePath and args parameters to the puppeteer.launch() function, which internally invokes child process.spawn() outside the sandbox boundary. This allows the execution of arbitrary OS commands as the Flowise process user and arbitrary host file disclosure via Chromium's file:// URL handling. For versions 3.0.8 through 3.1.2, exploitation requires the ALLOW BUILTIN DEP variable to be set to true, while earlier versions are exploitable by default.

Recommendations Update to version 3.1.3. Restrict access to the '/api/v1/node-custom-function' endpoint to minimize the risk of exploitation.