NodeVM sandbox escape leading to RCE in Flowise (CVE-2026-69254)

A sandbox escape vulnerability in Flowise's `executeJavaScriptCode()` function allows any authenticated user to execute arbitrary system commands as root on the Flowise server. The function merges caller-provided `nodeVMOptions` into the default sandbox configuration via JavaScript's spread operator, enabling an attacker to override the restricted module allowlist and re-enable blocked Node.js built-ins such as `child_process`. Successful exploitation grants full remote code execution as root, with access to all files on the filesystem including stored credentials and JWT signing secrets. Affected versions: - flowise <= 3.1.2 - flowise-components <= 3.1.2 We recommend updating to: flowise 3.1.3, flowise-components 3.1.3. CVSS 9.4 · our assessment: act_now Reference: https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3769-jgqc-cxm7 Details: https://vuln.today/cve/CVE-2026-69254