Remote code execution in FlowiseAI Flowise via TypeORM DataSource (CVE-2026-69251)

Flowise exposes arbitrary TypeORM DataSource options through the `additionalConfig` node input in multiple record manager and agent memory nodes. An authenticated user can abuse options such as `entities`, `subscribers`, and `migrations` to cause the server to load attacker-controlled local JavaScript files, escaping the vm2 sandbox and achieving remote code execution on the host. This results in full compromise of the application server. Affected versions: - <= 3.1.2 We recommend updating to: 3.1.3. CVSS 9.0 · our assessment: act_now Reference: https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g32j-mmxr-gfq5 Details: https://vuln.today/cve/CVE-2026-69251