{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"FlowiseAI/Flowise","product":"Flowise","source":"CNA: VulnCheck","vendor":"FlowiseAI","versions":[{"lessThanOrEqual":"3.1.4","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","ecosystem":"npm","packageName":"flowise","product":"flowise","source":"OSV GHSA-9gvv-qjj3-2p6g","vendor":"","versions":[{"events":[{"introduced":"0"},{"fixed":"3.1.3"}],"lessThan":"3.1.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","ecosystem":"npm","packageName":"flowise-components","product":"flowise-components","source":"OSV GHSA-9gvv-qjj3-2p6g","vendor":"","versions":[{"events":[{"introduced":"0"},{"fixed":"3.1.3"}],"lessThan":"3.1.3","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-119978","cwes":["CWE-749"],"description":"Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth package via LocalFileStore and requires it, escaping vm2 as the Flowise process user.","epss":{"date":"2026-11-02","percentile":0.24608,"score":0.00317},"exploits":[],"kev":null,"metrics":[{"score":9,"severity":"critical","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","version":"4.0"},{"score":8.5,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793652821605,"publishedAt":1793381311216,"references":[{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/soovwv/cve/blob/a37354aff1e78c0601772e7716f5318c473e8640/CVE-2026-119978.md"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/FlowiseAI/Flowise/blob/a65f81bb43ef66d3ce734bf0dff4223ae8041c95/packages/components/src/utils.ts#L55-L114"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/FlowiseAI/Flowise/blob/a65f81bb43ef66d3ce734bf0dff4223ae8041c95/packages/components/src/utils.ts#L1733"},{"source":"CNA: VulnCheck","tags":["related"],"url":"https://github.com/advisories/GHSA-9gvv-qjj3-2p6g"},{"source":"CNA: VulnCheck","tags":["product"],"url":"https://github.com/FlowiseAI/Flowise"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/flowise-through-3.1.4-custom-function-sandbox-escape-rce-via-localfilestore"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-9gvv-qjj3-2p6g"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-9gvv-qjj3-2p6g"}],"remediation":[{"kind":"fix","source":"OSV GHSA-9gvv-qjj3-2p6g","text":"flowise (npm): OSV reports a fixed version 3.1.3. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-9gvv-qjj3-2p6g"},{"kind":"fix","source":"OSV GHSA-9gvv-qjj3-2p6g","text":"flowise-components (npm): OSV reports a fixed version 3.1.3. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-9gvv-qjj3-2p6g"}],"revision":"b8613e1593c12affa925d8895acbdfd9316dc163de18f14f558037af2dc9cde3","sources":[{"modifiedAt":1793652821605,"name":"CNA: VulnCheck","retrievedAt":1793653787592,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119978"},{"modifiedAt":1793415355928,"name":"OSV / GitHub Security Advisories","retrievedAt":1793653789461,"url":"https://osv.dev/vulnerability/GHSA-9gvv-qjj3-2p6g"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793653809914,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-119978"}],"ssvc":null,"status":"published","title":"Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore","updatedAt":1793653809914}