Executive brief
Flowise is a low-code platform for building AI applications with a visual drag-and-drop interface. The SQL Database Chain node fails to validate file paths when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files to the system. An attacker can place malicious SQLite databases in critical directories to achieve remote code execution or stored cross-site scripting attacks.
Technical details
The vulnerability is a path traversal / improper input validation flaw (CWE-22) in the SQL Database Chain node's SQLite connection handler. The vulnerable code accepts user-supplied file paths for SQLite databases without validation and passes them directly to the underlying database connection logic. The attack requires authentication to the Flowise platform and network access to the application. An attacker can write crafted SQLite database files to arbitrary filesystem locations, including application directories (/usr/local/lib/node_modules/flowise/node_modules/flowise-ui/build/) to inject stored XSS payloads, or system directories (/etc/chromium) to execute arbitrary code. The vulnerability was patched in version 3.1.4 by adding path validation.
Affected products
- FlowiseAI Flowise before 3.1.4
- FlowiseAI flowise-components before 3.1.4
Timeline
- 2026-04-21: disclosed: Vulnerability disclosed by Alex Brown at elttam
- 2026-08-31: advisory: GitHub Security Advisory GHSA-pwfj-wh95-7mwp published
- 2026-09-15: patched: Fixed in version 3.1.4