FlowiseAI Flowise versions before 3.1.3 contain a code injection vulnerability (CWE-94) in the SQLite Record Manager node. The node accepts an additionalConfig parameter that can overwrite the intended database path, allowing an attacker with authentication and access to the published Docker image (which runs as root) to write SQLite database files to arbitrary locations on the host filesystem. By crafting table names and namespace values with shell syntax, the attacker can cause code execution when Chromium is launched by Puppeteer and sources configuration files from the compromised path. This issue is resolved in Flowise version 3.1.3.

An authenticated attacker can achieve arbitrary code execution on the host system running the vulnerable Flowise Docker container by writing malicious SQLite database files to system paths that Chromium will source as configuration files. This can lead to full system compromise due to the Docker container running as root and the ability to execute shell commands during Chromium startup.

Upgrade Flowise to version 3.1.3 or later, where this vulnerability is fixed. Until upgrading, restrict access to the Docker container and avoid running it with root privileges if possible. Monitor vendor advisories for any additional mitigation guidance.