CVE-2026-119978
High · 8.5CVSS
8.5
EPSS
—
Published
Oct 30, 2026
CISA due date
—
The record
Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth package via LocalFileStore and requires it, escaping vm2 as the Flowise process user.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-66088 In openEQUELLA before 2026.1, the system.execute() function available to the scripting… CWE-749
- CVE-2026-118602 Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation… CWE-749
- CVE-2026-118606 Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution… CWE-749
- CVE-2026-113775 A maliciously crafted dynamic library, when loaded from an arbitrary path through the… CWE-749
- CVE-2026-116019 Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page… CWE-749
- CVE-2026-70387 Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus… CWE-749
- CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation… CWE-749
- CVE-2026-86711 electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron… CWE-749