FlowiseAI Flowise versions before 3.1.3 contain a CWE-94 code injection vulnerability in the SQLite Record Manager node. The node accepts user-controlled additionalConfig which can overwrite the SQLite database path, enabling an authenticated attacker with access to the Docker image running as root to write SQLite databases to arbitrary system paths. By crafting the table name and namespace, the attacker can inject shell syntax into these files. When Puppeteer launches Chromium and sources configuration files from /etc/chromium/*.conf, the injected shell commands execute, leading to remote code execution. The issue is resolved in version 3.1.3.

An authenticated attacker can achieve remote code execution by injecting shell commands into system configuration files via a manipulated SQLite database path. This can lead to full system compromise, especially since the Docker image runs as root. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity with high impact on confidentiality, integrity, and availability.

Upgrade Flowise to version 3.1.3 or later, where this vulnerability is fixed. No other mitigation is indicated or required as the fix addresses the root cause. Since this is not a cloud service, remediation depends on applying the official update.