CVE-2026-46442: CWE-94: Improper Control of Generation of Code ('Code Injection') in FlowiseAI Flowise
FlowiseAI Flowise versions prior to 3.1.2 contain a critical code injection vulnerability in the POST /api/v1/node-custom-function endpoint. This endpoint lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript code. When the E2B_APIKEY is not configured, the submitted code executes inside a NodeVM sandbox that can be escaped, enabling attackers to execute system commands on the host. This results in authenticated remote code execution on the Flowise server host. The vulnerability is patched in version 3.1.2.
AI Analysis
Technical Summary
FlowiseAI Flowise before version 3.1.2 has an improper control of code generation vulnerability (CWE-94) in the POST /api/v1/node-custom-function API endpoint. The endpoint does not enforce route-level authorization, permitting any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When the common deployment scenario lacks E2B_APIKEY configuration, the JavaScript runs inside a NodeVM sandbox that can be escaped. This escape allows attackers to access the host process object and execute system commands via child_process, leading to authenticated remote code execution on the server host. The issue is resolved in version 3.1.2.
Potential Impact
An attacker with authentication or a valid API key can submit malicious JavaScript code that escapes the sandbox environment and executes arbitrary system commands on the Flowise server host. This results in authenticated remote code execution, which can lead to full compromise of the server running Flowise.
Mitigation Recommendations
Upgrade Flowise to version 3.1.2 or later, where this vulnerability is patched. Until upgrading, restrict access to the POST /api/v1/node-custom-function endpoint to trusted users only and configure E2B_APIKEY to enable additional security controls if possible. Patch status is confirmed as fixed in version 3.1.2.
CVE-2026-46442: CWE-94: Improper Control of Generation of Code ('Code Injection') in FlowiseAI Flowise
Description
FlowiseAI Flowise versions prior to 3.1.2 contain a critical code injection vulnerability in the POST /api/v1/node-custom-function endpoint. This endpoint lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript code. When the E2B_APIKEY is not configured, the submitted code executes inside a NodeVM sandbox that can be escaped, enabling attackers to execute system commands on the host. This results in authenticated remote code execution on the Flowise server host. The vulnerability is patched in version 3.1.2.
CVSS v4.0
Score 9.4critical
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
FlowiseAI Flowise before version 3.1.2 has an improper control of code generation vulnerability (CWE-94) in the POST /api/v1/node-custom-function API endpoint. The endpoint does not enforce route-level authorization, permitting any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When the common deployment scenario lacks E2B_APIKEY configuration, the JavaScript runs inside a NodeVM sandbox that can be escaped. This escape allows attackers to access the host process object and execute system commands via child_process, leading to authenticated remote code execution on the server host. The issue is resolved in version 3.1.2.
Potential Impact
An attacker with authentication or a valid API key can submit malicious JavaScript code that escapes the sandbox environment and executes arbitrary system commands on the Flowise server host. This results in authenticated remote code execution, which can lead to full compromise of the server running Flowise.
Mitigation Recommendations
Upgrade Flowise to version 3.1.2 or later, where this vulnerability is patched. Until upgrading, restrict access to the POST /api/v1/node-custom-function endpoint to trusted users only and configure E2B_APIKEY to enable additional security controls if possible. Patch status is confirmed as fixed in version 3.1.2.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-13T22:18:22.831Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a26e468e29bf47b501e313b
Added to database: 06/08/2026, 15:48:56 UTC
Last enriched: 06/16/2026, 08:37:47 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 88
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.